CVE-2013-1397

Published: Jun 2, 2014Modified: May 6, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Symfony 2.0.x before 2.0.22, 2.1.x before 2.1.7, and 2.2.x remote attackers to execute arbitrary PHP code via a serialized PHP object to the (1) Yaml::parse or (2) Yaml\Parser::parse function, a different vulnerability than CVE-2013-1348.

Affected (40)

Products: Sensiolabs: Symfony

Sensiolabs

1 product

Symfony

Configuration A

40 vulnerable

Vulnerable Software	Affected Versions
Sensiolabs Symfony	Version 2.0.0
Sensiolabs Symfony	Version 2.0.10
Sensiolabs Symfony	Version 2.0.11
Sensiolabs Symfony	Version 2.0.12
Sensiolabs Symfony	Version 2.0.13
Sensiolabs Symfony	Version 2.0.14
Sensiolabs Symfony	Version 2.0.15
Sensiolabs Symfony	Version 2.0.16
Sensiolabs Symfony	Version 2.0.17
Sensiolabs Symfony	Version 2.0.18
Sensiolabs Symfony	Version 2.0.19
Sensiolabs Symfony	Version 2.0.1
Sensiolabs Symfony	Version 2.0.20
Sensiolabs Symfony	Version 2.0.21
Sensiolabs Symfony	Version 2.0.2
Sensiolabs Symfony	Version 2.0.3
Sensiolabs Symfony	Version 2.0.4
Sensiolabs Symfony	Version 2.0.5
Sensiolabs Symfony	Version 2.0.6
Sensiolabs Symfony	Version 2.0.7
Sensiolabs Symfony	Version 2.0.8
Sensiolabs Symfony	Version 2.0.9
Sensiolabs Symfony	Version 2.1.0
Sensiolabs Symfony	Version 2.1.1
Sensiolabs Symfony	Version 2.1.2
Sensiolabs Symfony	Version 2.1.3
Sensiolabs Symfony	Version 2.1.4
Sensiolabs Symfony	Version 2.1.5
Sensiolabs Symfony	Version 2.1.6
Sensiolabs Symfony	Version 2.2.0
Sensiolabs Symfony	Version 2.2.10
Sensiolabs Symfony	Version 2.2.11
Sensiolabs Symfony	Version 2.2.1
Sensiolabs Symfony	Version 2.2.2
Sensiolabs Symfony	Version 2.2.3
Sensiolabs Symfony	Version 2.2.4
Sensiolabs Symfony	Version 2.2.5
Sensiolabs Symfony	Version 2.2.6
Sensiolabs Symfony	Version 2.2.8
Sensiolabs Symfony	Version 2.2.9