From 8c6afd873c481a3ba547cdf45623a15820eee450 Mon Sep 17 00:00:00 2001 From: Christian Flothmann Date: Wed, 27 May 2015 08:25:24 +0200 Subject: [PATCH] [Contributing][Security] add CVE-2015-4050 --- contributing/code/security.rst | 1 + 1 file changed, 1 insertion(+) diff --git a/contributing/code/security.rst b/contributing/code/security.rst index 794abbb4157..abfc08cb360 100644 --- a/contributing/code/security.rst +++ b/contributing/code/security.rst @@ -96,6 +96,7 @@ Security Advisories This section indexes security vulnerabilities that were fixed in Symfony releases, starting from Symfony 1.0.0: +* May 26, 2015: `CVE-2015-4050: ESI unauthorized access `_ (Symfony 2.3.29, 2.5.12 and 2.6.8) * April 1, 2015: `CVE-2015-2309: Unsafe methods in the Request class `_ (Symfony 2.3.27, 2.5.11 and 2.6.6) * April 1, 2015: `CVE-2015-2308: Esi Code Injection `_ (Symfony 2.3.27, 2.5.11 and 2.6.6) * September 3, 2014: `CVE-2014-6072: CSRF vulnerability in the Web Profiler `_ (Symfony 2.3.19, 2.4.9 and 2.5.4)