| Gói / sản phẩm | Phiên bản bị ảnh hưởng | Phiên bản đã vá |
|---|---|---|
| symfony/framework-bundle | ≥ 2.0.0, < 2.3.18≥ 2.4.0, < 2.4.8≥ 2.5.0, < 2.5.2 | 2.3.182.4.82.5.2 |
| symfony/symfony | ≥ 2.0.0, < 2.3.19≥ 2.4.0, < 2.4.9≥ 2.5.0, < 2.5.4 | 2.3.192.4.92.5.4 |
When investigating issue #11093, Jeremy Derussé found a serious code injection issue in the way Symfony implements translation caching in FrameworkBundle.
Your Symfony application is vulnerable if you meet the following conditions:
You are using the Symfony translation system from FrameworkBundle (so basically if you are using Symfony full-stack -- you are not affected if you are using the Translation component with Silex for instance); You don't sanitize locales coming from a URL (any route with a _locale argument for instance):
When vulnerable, an attacker can submit a non-valid locale value that can contain some PHP code that will be executed by Symfony. That's because the locale value is dumped into a PHP file generated in the cache without being sanitized first.
Bạn đang dùng một trong các sản phẩm này? Quét site để biết có đang lộ phiên bản có lỗ hổng không.
Quét site miễn phí