{"vulnerability": "CVE-2019-1091", "sightings": [{"uuid": "c225e264-59a8-4cc3-aec5-abfa8220a9fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-10910", "type": "seen", "source": "https://t.me/cve_mitre_org/26", "content": "CVE-2019-10910 In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, when service ids allow user input, this could allow for SQL Injection and remote code execution. This is related to symfony/depen... https://t.co/77Tn2dtJ4w\u2014 CVE (@CVEnew) May 16, 2019\n\nMay 17, 2019 at 01:45AM\nvia Twitter https://twitter.com/CVEnew", "creation_timestamp": "2019-05-16T22:51:25.000000Z"}, {"uuid": "5d5671ec-1c63-466f-80cd-d13fa4a13efc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-10912", "type": "seen", "source": "https://t.me/cve_mitre_org/28", "content": "CVE-2019-10912 In Symfony before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, it is possible to cache objects that may contain bad user input. On serialization or unserialization, this could result in the deletion of files that ... https://t.co/nFPKQoVirG\u2014 CVE (@CVEnew) May 16, 2019\n\nMay 17, 2019 at 01:45AM\nvia Twitter https://twitter.com/CVEnew", "creation_timestamp": "2019-05-16T22:51:27.000000Z"}, {"uuid": "c8762ef4-ef4b-4251-96e7-5db14cb3ec77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-10913", "type": "seen", "source": "https://t.me/cve_mitre_org/29", "content": "CVE-2019-10913 In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, HTTP Methods provided as verbs or using the override header may be treated as trusted input, but they are not validated, possibly... https://t.co/l3nNS5InnK\u2014 CVE (@CVEnew) May 16, 2019\n\nMay 17, 2019 at 01:45AM\nvia Twitter https://twitter.com/CVEnew", "creation_timestamp": "2019-05-16T22:51:28.000000Z"}, {"uuid": "417ad87d-17a2-4648-9e77-16faeea412a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-10911", "type": "seen", "source": "https://t.me/cve_mitre_org/27", "content": "CVE-2019-10911 In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, a vulnerability would allow an attacker to authenticate as a privileged user on sites with user registration and remember me logi... https://t.co/nPIH1xy3dp\u2014 CVE (@CVEnew) May 16, 2019\n\nMay 17, 2019 at 01:45AM\nvia Twitter https://twitter.com/CVEnew", "creation_timestamp": "2019-05-16T22:51:26.000000Z"}]}