UBUNTU-CVE-2023-46735: symfony Ubuntu
CVSS: 6.1v3.1MediumPublished
Published 10-11-2023Last modified 05-02-2026
Vulnerability summary
UBUNTU-CVE-2023-46735 is a medium (CVSS 6.1) vulnerability in symfony Ubuntu.
CVSS score
6.1/10
010
Medium · v3.1 (OSV · Ubuntu), selected by version preferenceEPSS score
Not scored
0%100%
No EPSS score yetKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 0 · Related 1Timeline
- 10-11-2023PublishedVulnerability first disclosed.
- 05-02-2026Last modifiedVulnerability information updated.
Description
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Starting in version 6.0.0 and prior to version 6.3.8, the error message in `WebhookController` returns unescaped user-submitted input. As of version 6.3.8, `WebhookController` now doesn't return any user-submitted input in its response.
CVSS metrics
1 score · 1 source · 1 versionMedium 6.1Preferred score · OSV · Ubuntu (Ecosystem advisory) · calculated from vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NSourcesSingle source
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu1 product
- symfonyAll versions (No fix recorded)
1 vendor · 1 product