CVE-2019-10909: Cross-site Scripting

May 16, 2019 (updated November 9, 2019)

In Symfony, validation messages are not escaped, which can lead to XSS when user input is included. This is related to symfony/framework-bundle.

References

symfony.com/cve-2019-10909

Detect and mitigate CVE-2019-10909 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →