WS-2022-0059 | Mend Vulnerability Database

Vulnerability DatabaseWS-2022-0059

WS-2022-0059

Published:May 14, 2026

Updated:May 14, 2026

In symfony the application sensible to CSRF attacks before versions 5.3.15,5.4.4 and 6.0.4.

Affected Packages

linhecheng/cmlphp (PHP):

Affected version(s) >=v5.3.0-BETA1 <5.3.x-dev

Fix Suggestion:

Update to version 5.3.x-dev

symfony/framework-bundle (PHP):

Affected version(s) >=v5.4.0-BETA2 <5.4.x-dev

Fix Suggestion:

Update to version 5.4.x-dev

ics/userhelp-bundle (PHP):

Affected version(s) =0.0.2 <0.0.3

Fix Suggestion:

Update to version 0.0.3

symfony/framework-bundle (PHP):

Affected version(s) >=v6.0.0-RC1 <v6.0.0

Fix Suggestion:

Update to version v6.0.0

cybernodev/framework-bundle (PHP):

Affected version(s) =v5.3.0-BETA1

Fix Suggestion:

Update to version no_fix

symfony/framework-bundle (PHP):

Affected version(s) =v6.0.0-BETA2 <v6.0.0-BETA3

Fix Suggestion:

Update to version v6.0.0-BETA3

kematjaya/crawling-processor-bundle (PHP):

Affected version(s) >=dev-main <1.1

Fix Suggestion:

Update to version 1.1

symfony/symfony (PHP):

Affected version(s) >=v5.4.0-BETA1 <5.4.x-dev

Fix Suggestion:

Update to version 5.4.x-dev

symfony/symfony (PHP):

Affected version(s) >=v5.3.0 <v5.3.15

Fix Suggestion:

Update to version v5.3.15

symfony/symfony (PHP):

Affected version(s) >=v5.3.0-BETA1 <5.3.x-dev

Fix Suggestion:

Update to version 5.3.x-dev

symfony/symfony (PHP):

Affected version(s) >=v5.4.0 <v5.4.4

Fix Suggestion:

Update to version v5.4.4

symfony/framework-bundle (PHP):

Affected version(s) >=v5.3.0-BETA1 <v5.3.4

Fix Suggestion:

Update to version v5.3.4

linhecheng/cmlphp (PHP):

Affected version(s) >=v6.0.0-BETA1 <6.0.x-dev

Fix Suggestion:

Update to version 6.0.x-dev

linhecheng/cmlphp (PHP):

Affected version(s) >=v5.4.0 <v5.4.4

Fix Suggestion:

Update to version v5.4.4

symfony/symfony (PHP):

Affected version(s) =v6.0.0 <vPR6

Fix Suggestion:

Update to version vPR6

symfony/symfony (PHP):

Affected version(s) >=v6.0.0-BETA1 <6.0.x-dev

Fix Suggestion:

Update to version 6.0.x-dev

linhecheng/cmlphp (PHP):

Affected version(s) >=v6.0.0 <v6.0.4

Fix Suggestion:

Update to version v6.0.4

linhecheng/cmlphp (PHP):

Affected version(s) >=v5.3.0 <v5.3.15

Fix Suggestion:

Update to version v5.3.15

symfony/symfony (PHP):

Affected version(s) >=v6.0.1 <v6.0.4

Fix Suggestion:

Update to version v6.0.4

symfony/framework-bundle (PHP):

Affected version(s) =v5.4.2 <v5.4.3

Fix Suggestion:

Update to version v5.4.3

linhecheng/cmlphp (PHP):

Affected version(s) >=v5.4.0-BETA1 <5.4.x-dev

Fix Suggestion:

Update to version 5.4.x-dev

symfony/framework-bundle (PHP):

Affected version(s) >=v5.3.7 <v5.3.10

Fix Suggestion:

Update to version v5.3.10

Related Resources (1)

https://github.com/symfony/symfony/commit/f0ffb775febdf07e57117aabadac96fa37857f50

Do you need more information?

CVSS v4

Base Score:

7.1

Attack Vector

NETWORK

Attack Complexity

LOW

Attack Requirements

NONE

Privileges Required

NONE

User Interaction

PASSIVE

Vulnerable System Confidentiality

NONE

Vulnerable System Integrity

HIGH

Vulnerable System Availability

NONE

Subsequent System Confidentiality

NONE

Subsequent System Integrity

NONE

Subsequent System Availability

NONE

CVSS v3

Base Score:

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

NONE

Integrity

HIGH

Availability

NONE