CVE-2012-5574

Name of the Vulnerable Software and Affected Versions Symfony CMS versions prior to 1.4.20

Description The issue allows remote attackers to read arbitrary files via a crafted upload request. This is due to a flaw in the lib/form/sfForm.class.php file.

Recommendations For versions prior to 1.4.20, update to version 1.4.20 or later to resolve the issue. As a temporary workaround, consider restricting access to the upload functionality until a patch is applied.