A vulnerability classified as problematic has been found in FriendsOfSymfony1 symfony1 up to 1.5.17. Affected is the function __destruct. The manipulation leads to deserialization.

This vulnerability is traded as CVE-2024-28859. It is possible to launch the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.