{"id":"CVE-2017-11365","details":"Certain Symfony products are affected by: Incorrect Access Control. This affects Symfony 2.7.30 and Symfony 2.8.23 and Symfony 3.2.10 and Symfony 3.3.3. The type of exploitation is: remote. The component is: Password validator.","aliases":["GHSA-q87v-q8fw-gmj5"],"modified":"2026-08-03T11:46:04.001729142Z","published":"2019-05-23T18:29:00.373Z","database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:a:sensiolabs:symfony:2.7.30:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"2.7.30"},{"last_affected":"2.7.30"}],"source":"CPE_STRING","vendor_product":"sensiolabs:symfony"}]},"references":[{"type":"FIX","url":"https://github.com/symfony/symfony/commit/878198cefae028386c6dc800ccbf18f2b9cbff3f"},{"type":"FIX","url":"https://github.com/symfony/symfony/pull/23507"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/symfony/security-http","events":[{"introduced":"459e2569cf47660bed0efba1d451803fe1061c55"},{"last_affected":"b5684f5041e79d7e661c2afc046390fc7666f428"}],"database_specific":{"source":"CPE_STRING","cpe":["cpe:2.3:a:sensiolabs:symfony:2.7.30:*:*:*:*:*:*:*","cpe:2.3:a:sensiolabs:symfony:2.8.23:*:*:*:*:*:*:*","cpe:2.3:a:sensiolabs:symfony:3.2.10:*:*:*:*:*:*:*","cpe:2.3:a:sensiolabs:symfony:3.3.3:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"2.7.30"},{"last_affected":"2.7.30"},{"introduced":"2.8.23"},{"last_affected":"2.8.23"},{"introduced":"3.2.10"},{"last_affected":"3.2.10"},{"introduced":"3.3.3"},{"last_affected":"3.3.3"}]}}],"versions":["2.7.30","2.8.23","3.2.10","3.3.3"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-11365.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/symfony/symfony","events":[{"introduced":"0"},{"fixed":"878198cefae028386c6dc800ccbf18f2b9cbff3f"}],"database_specific":{"source":"REFERENCES"}}],"versions":["v2.7.31","v2.7.30","v2.7.29","v2.7.28","v2.7.26","v2.7.27","v2.7.25","v2.7.24","v2.7.23","v2.7.22","v2.7.21","v2.7.20","v2.7.19","v2.7.18","v2.7.17","v2.7.16","v2.7.15","v2.7.14","v2.7.13","v2.7.12","v2.7.11","v2.7.10","v2.7.9","v2.7.8","v2.7.7","v2.7.6","v2.7.5","v2.7.4","v2.7.3","v2.7.2","v2.7.1","v2.7.0","v2.7.0-BETA2","v2.7.0-BETA1","v2.6.0-BETA1","v2.5.0-BETA1","v2.5.0-BETA2","v2.4.0-BETA2","v2.4.0-BETA1","v2.3.0-BETA2","v2.3.0-BETA1","v2.2.0-BETA2","v2.2.0-BETA1","v2.1.0","v2.1.0-RC2","v2.1.0-RC1","v2.1.0-BETA4","v2.1.0-BETA3","v2.1.0-BETA2","v2.1.0-BETA1","v2.0.0","v2.0.0-RC6","v2.0.0-RC5","v2.0.0-RC4","v2.0.0-RC3","v2.0.0-RC2","v2.0.0-RC1","v2.0.0BETA5","v2.0.0BETA4","v2.0.0BETA3","v2.0.0BETA2","v2.0.0BETA1","vPR9","vPR8","v2.0.0PR8","vPR6","vPR5","vPR4","vPR3"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-11365.json"}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}