A vulnerability classified as problematic has been found in FriendsOfSymfony1 symfony1 up to 1.5.17. Affected is the function
__destruct
. The manipulation leads to deserialization.
This vulnerability is traded as CVE-2024-28859. It is possible to launch the attack remotely. There is no exploit available.
It is recommended to upgrade the affected component.