| パッケージ | 影響を受けるバージョン | 修正済みバージョン |
|---|---|---|
| symfony/framework-bundle | ≥ 2.0.0, < 2.3.18≥ 2.4.0, < 2.4.8≥ 2.5.0, < 2.5.2 | 2.3.182.4.82.5.2 |
| symfony/symfony | ≥ 2.0.0, < 2.3.19≥ 2.4.0, < 2.4.9≥ 2.5.0, < 2.5.4 | 2.3.192.4.92.5.4 |
When investigating issue #11093, Jeremy Derussé found a serious code injection issue in the way Symfony implements translation caching in FrameworkBundle.
Your Symfony application is vulnerable if you meet the following conditions:
You are using the Symfony translation system from FrameworkBundle (so basically if you are using Symfony full-stack -- you are not affected if you are using the Translation component with Silex for instance); You don't sanitize locales coming from a URL (any route with a _locale argument for instance):
When vulnerable, an attacker can submit a non-valid locale value that can contain some PHP code that will be executed by Symfony. That's because the locale value is dumped into a PHP file generated in the cache without being sanitized first.
これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。
無料でサイトをスキャン