16Mar
CVE-2024-28859 | FriendsOfSymfony1 symfony1 up to 1.5.17 __destruct deserialization (GHSA-wjv8-pxr6-5f4r)
A vulnerability classified as problematic has been found in FriendsOfSymfony1 symfony1 up to 1.5.17. Affected is the function__destruct
. The manipulation leads to deserialization.
This vulnerability is traded as CVE-2024-28859. It is possible to launch the attack remotely. There is no exploit available.
It is recommended to upgrade the affected component.