En resumen
- CVE-2025-64500 es una vulnerabilidad ALTO (CVSS 7.3) que afecta a symfony/http-foundation, symfony/symfony, httpfoundation (sensiolabs).
- Probabilidad de explotación en los próximos 30 días (EPSS): 1.4%, mayor que el 72.6% de las vulnerabilidades.
- Solución: actualizar a 6.4.29, 7.3.7, 5.4.50 o posterior.
| Package | Affected versions | Patched versions |
|---|
| symfony/http-foundation Packagist | ≥ 6.0.0, < 6.4.29≥ 7.0.0, < 7.3.7< 5.4.50
| 6.4.297.3.75.4.50
|
| symfony/symfony Packagist | ≥ 2.0.0, < 5.4.50≥ 6.0.0, < 6.4.29≥ 7.0.0, < 7.3.7
| 5.4.506.4.297.3.7
|
| httpfoundation | ≥ 2.0.0, < 5.4.50≥ 6.0.0, < 6.4.29≥ 7.0.0, < 7.3.7
| 5.4.506.4.297.3.7
|
| symfony | ≥ 2.0.0, < 5.4.50≥ 6.0.0, < 6.4.29≥ 7.0.0, < 7.3.7
| 5.4.506.4.297.3.7
|
Description
Description
The Request class improperly interprets some PATH_INFO in a way that leads to representing some URLs with a path that doesn't start with a /. This can allow bypassing some access control rules that are built with this /-prefix assumption.
Resolution
The Request class now ensures that URL paths always start with a /.
The patch for this issue is available here for branch 5.4.
Credits
We would like to thank Andrew Atkinson for discovering the issue, Chris Smith for reporting it and Nicolas Grekas for providing the fix.
NVD description
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Symfony's HttpFoundation component defines an object-oriented layer for the HTTP specification. Starting in version 2.0.0 and prior to version 5.4.50, 6.4.29, and 7.3.7, the `Request` class improperly interprets some `PATH_INFO` in a way that leads to representing some URLs with a path that doesn't start with a `/`. This can allow bypassing some access control rules that are built with this `/`-prefix assumption. Starting in versions 5.4.50, 6.4.29, and 7.3.7, the `Request` class now ensures that URL paths always start with a `/`.
Más vulnerabilidades de symfony/http-foundation
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free