CVE-2026-48761:详情

CVE-2026-48761

6.1
/
中危
2026-07-14
20h17 +00:00
Cross-site Scripting
A03-Injection
Network
2026-07-21
19h17 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0 until 6.4.41, 7.4.13, and 8.0.13, UrlAttributeSanitizer::getSupportedAttributes() omitted URL-bearing attributes on , ,