Hi Team, I'm encountering a Command Injection vulnerability in the Symfony/Component/Intl/Resources/bin/update-data.php file, specifically at lines 169 and 173. The issue is described as: Unsanitized input from an HTTP header flows into exec, where it is used to build a shell command. This may result in a Command Injection vulnerability.
I'm currently using Symfony version 6.4, and I have also tested this with the latest version, but the issue persists.
Could you please help me resolve this? Thanks in advance!
File link : (https://github.com/symfony/symfony/blob/6.4/src/Symfony/Component/Intl/Resources/bin/update-data.php)