PT-2023-1579 · Symfony+5 · Symfony+5
Soner Sayakci
·
Publicado
2023-02-01
·
Atualizado
2025-04-10
·
CVE-2022-24894
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Symfony versions prior to 4.4
Description
The Symfony HTTP cache system acts as a reverse proxy, caching entire responses, including headers, and returning them to clients. A recent change in the
AbstractSessionListener may cause the response to contain a Set-Cookie header. If the Symfony HTTP cache system is enabled, this response might be stored and returned to other clients, allowing an attacker to retrieve the victim's session.Recommendations
For versions prior to 4.4, update to branch 4.4 to resolve the issue. As a temporary workaround, consider disabling the
AbstractSessionListener or restricting access to the Symfony HTTP cache system until the patch is applied. The HttpStore constructor now takes a parameter containing a list of private headers that are removed from the HTTP response headers, with the default value being Set-Cookie, which can be overridden or extended by the application.Exploit
Correção
Improper Authorization
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Astra Linux
Linuxmint
Red Os
Symfony
Ubuntu