Code Injection
The Yaml::parse function in Symfony remote attackers to execute arbitrary PHP code via a PHP file.
The Yaml::parse function in Symfony remote attackers to execute arbitrary PHP code via a PHP file.
Symfony allows remote attackers to execute arbitrary PHP code via a serialized PHP object to the (1) Yaml::parse or (2) Yaml arser::parse function.