PT-2012-6276 · Symfony · Symfony

Manuele Menozzi · Published 2012-12-27 · Updated 2022-05-17 · CVE-2012-6431

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Symfony versions 2.0.x before 2.0.20

Description The issue allows remote attackers to bypass intended URI restrictions via a doubly encoded string. This is due to inconsistent processing of URL encoded data within the Routing and Security components. Specifically, the Routing component decodes the path a second time, whereas the Security component does not, causing a difference that makes Symfony vulnerable to double encoding attacks. This security issue allows access to routes protected by a firewall even when the user is not logged in.

Recommendations For Symfony versions 2.0.x before 2.0.20, update to version 2.0.20 or later to resolve the issue. As a temporary workaround, consider restricting access to protected routes until the update is applied.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-264

CWE-287

Related Identifiers

CVE-2012-6431

GHSA-83C3-QX27-2RWR

Affected Products

Symfony

References · 11

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/http-foundation/CVE-2012-6431.yaml · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/routing/CVE-2012-6431.yaml · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security/CVE-2012-6431.yaml · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2012-6431.yaml · Exploit
• https://osv.dev/vulnerability/GHSA-83c3-qx27-2rwr · Vendor Advisory
• http://symfony.com/blog/security-release-symfony-2-0-20-and-2-1-5-released · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-6431 · Security Note
• https://github.com/symfony/symfony/commit/8b2c17f80377582287a78e0b521497e039dd6b0d · Note
• https://github.com/symfony/symfony/commit/55014a6841bec50046e8329a4835c160ac31a496 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6431 · Note
• https://symfony.com/blog/security-release-symfony-2-0-20-and-2-1-5-released · Note