GHSA-wfv7-5x33-v22h
Suggest an improvement- Source
- https://github.com/advisories/GHSA-wfv7-5x33-v22h
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/05/GHSA-wfv7-5x33-v22h/GHSA-wfv7-5x33-v22h.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/GHSA-wfv7-5x33-v22h
- Aliases
-
- CVE-2014-4931
- Published
- 2024-05-30T00:21:25Z
- Modified
- 2024-05-30T00:57:06.625884Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- Summary
- Code injection in the way Symfony implements translation caching in FrameworkBundle
- Details
-
When investigating issue #11093, Jeremy Derussé found a serious code injection issue in the way Symfony implements translation caching in FrameworkBundle.
Your Symfony application is vulnerable if you meet the following conditions:
You are using the Symfony translation system from FrameworkBundle (so basically if you are using Symfony full-stack -- you are not affected if you are using the Translation component with Silex for instance); You don't sanitize locales coming from a URL (any route with a _locale argument for instance):
When vulnerable, an attacker can submit a non-valid locale value that can contain some PHP code that will be executed by Symfony. That's because the locale value is dumped into a PHP file generated in the cache without being sanitized first.
- Database specific
{ "nvd_published_at": null, "cwe_ids": [ "CWE-94" ], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2024-05-30T00:21:25Z" }- References
-
- https://github.com/symfony/symfony/commit/06a80fbdbe744ad6f3010479ba64ef5cf35dd9af.patch
- https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/framework-bundle/CVE-2014-4931.yaml
- https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2014-4931.yaml
- https://symfony.com/blog/security-releases-cve-2014-4931-symfony-2-3-18-2-4-8-and-2-5-2-released
Affected packages
Packagist / symfony/framework-bundle
Package
- Name
- symfony/framework-bundle
- Purl
- pkg:composer/symfony/framework-bundle
Affected versions
2.*
v2.*
Packagist / symfony/framework-bundle
Package
- Name
- symfony/framework-bundle
- Purl
- pkg:composer/symfony/framework-bundle
Packagist / symfony/framework-bundle
Package
- Name
- symfony/framework-bundle
- Purl
- pkg:composer/symfony/framework-bundle
Packagist / symfony/symfony
Package
- Name
- symfony/symfony
- Purl
- pkg:composer/symfony/symfony
Affected versions
2.*
v2.*
Packagist / symfony/symfony
Package
- Name
- symfony/symfony
- Purl
- pkg:composer/symfony/symfony
Packagist / symfony/symfony
Package
- Name
- symfony/symfony
- Purl
- pkg:composer/symfony/symfony