CyberRota Analysis
AI-GeneratedThe Symfony framework is vulnerable to a memory exhaustion issue due to the recursive resolution of YAML collection aliases in the Parser component, which can be triggered by untrusted YAML input. This vulnerability can lead to significant resource depletion, potentially causing denial-of-service conditions in affected applications. Organizations using Symfony versions prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12 should prioritize updating to mitigate this high-severity risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, Symfony\Component\Yaml\Parser resolved YAML collection aliases recursively, allowing a small untrusted YAML input to expand into a multi-gigabyte structure and exhaust memory. This issue is fixed in versions 5.4.52, 6.4.40, 7.4.12, and 8.0.12.
Related CVEs
Other vulnerabilities affecting the same vendor(s)