|
|
| |
|
| |
php-symfony2-Validator: validation metadata serialization and loss of information
| Package(s): | php-symfony2-Validator |
CVE #(s): | CVE-2013-4751
|
| Created: | August 21, 2013 |
Updated: | August 21, 2013 |
| Description: |
From the Symfony advisory:
Affected versions
All 2.0.X, 2.1.X, 2.2.X, and 2.3.X versions of the Validator component are affected by this issue.
Description
When using the Validator component, if Symfony\\Component\\Validator\\Mapping\\Cache\\ApcCache is enabled (or any other cache implementing Symfony\\Component\\Validator\\Mapping\\Cache\\CacheInterface), some information is lost during serialization (the collectionCascaded and the collectionCascadedDeeply fields).
As a consequence, arrays or traversable objects stored in fields using the @Valid constraint are not traversed by the validator as soon as the validator configuration is loaded from the cache.
|
| Alerts: |
|
( Log in to post comments)
|
|
|