Path Rules Enforced in Front of PHP Can Be Bypassed by Appending the Path to the Script Name

PKSA-pr6q-2w5s-kzzf

Affected package: symfony/http-foundation

Affected version: >=5.4.50,<5.4.56|>=6.4.29,<6.4.50|>=7.3.7,<7.4.0|>=7.4.0,<7.4.23|>=8.0.0,<8.1.0|>=8.1.0,<8.1.11

Reported by:
FriendsOfPHP/security-advisories