feature symfony#31 Added CVE-2014-6072 for Symfony (stof)

fabpot · fabpot · commit 61ed9f3b1e96 · 2014-09-04T19:28:32.000+02:00
This PR was merged into the master branch. Discussion ---------- Added CVE-2014-6072 for Symfony Commits ------- 76561f3 Added CVE-2014-6072 for Symfony
diff --git a/symfony/symfony/CVE-2014-6072.yaml b/symfony/symfony/CVE-2014-6072.yaml
@@ -0,0 +1,23 @@
+title:     CSRF vulnerability in the Web Profiler
+link:      http://symfony.com/blog/cve-2014-6072-csrf-vulnerability-in-the-web-profiler
+cve:       CVE-2014-6072
+branches:
+    2.0.x:
+        time:     2014-09-03 07:40:30
+        versions: [>=2.0.0,<2.1.0]
+    2.1.x:
+        time:     2014-09-03 07:40:30
+        versions: [>=2.1.0,<2.2.0]
+    2.2.x:
+        time:     2014-09-03 07:40:30
+        versions: [>=2.2.0,<2.3.0]
+    2.3.x:
+        time:     2014-09-03 07:40:30
+        versions: [>=2.3.0,<2.3.19]
+    2.4.x:
+        time:     2014-09-03 07:40:30
+        versions: [>=2.4.0,<2.4.9]
+    2.5.x:
+        time:     2014-09-03 07:40:30
+        versions: [>=2.5.0,<2.5.4]
+reference: composer://symfony/symfony
diff --git a/symfony/web-profiler-bundle/CVE-2014-6072.yaml b/symfony/web-profiler-bundle/CVE-2014-6072.yaml
@@ -0,0 +1,23 @@
+title:     CSRF vulnerability in the Web Profiler
+link:      http://symfony.com/blog/cve-2014-6072-csrf-vulnerability-in-the-web-profiler
+cve:       CVE-2014-6072
+branches:
+    2.0.x:
+        time:     2014-09-03 07:40:30
+        versions: [>=2.0.0,<2.1.0]
+    2.1.x:
+        time:     2014-09-03 07:40:30
+        versions: [>=2.1.0,<2.2.0]
+    2.2.x:
+        time:     2014-09-03 07:40:30
+        versions: [>=2.2.0,<2.3.0]
+    2.3.x:
+        time:     2014-09-03 07:40:30
+        versions: [>=2.3.0,<2.3.19]
+    2.4.x:
+        time:     2014-09-03 07:40:30
+        versions: [>=2.4.0,<2.4.9]
+    2.5.x:
+        time:     2014-09-03 07:40:30
+        versions: [>=2.5.0,<2.5.4]
+reference: composer://symfony/web-profiler-bundle
