Direct access of ESI URLs behind a trusted proxy

PKSA-6dsk-crym-v443 CVE-2014-5245

Affected package: symfony/http-kernel

Affected version: >=2.0.0,<2.1.0|>=2.1.0,<2.2.0|>=2.2.0,<2.3.0|>=2.3.0,<2.3.19|>=2.4.0,<2.4.9|>=2.5.0,<2.5.4

Reported by:
FriendsOfPHP/security-advisories