friendsofsymfony/rest-bundle vulnerabilities

Latest friendsofsymfony/rest-bundle CVEs

Newest publication first

1. GHSA-p9fg-j6ww-953m FOSRestBundle issue with broken validation of JSONP callbacks

   Published 2024-05-15

   Unknown

   Starting with FOSRestBundle 1.2 we switched to using willdurand/jsonp-callback-validator for validation of JSONP callbacks. However the change was implemented incorrectly validating the callback query param name, rather than its value. Anyone using the JSONP handler (which is off...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.