PT-2017-3875 · Symfony · Symfony
Ondrej Exner
·
Published
2017-11-17
·
Updated
2022-05-14
·
CVE-2017-16790
CVSS v2.0
6.8
Medium
| Vector | AV:N/AC:L/Au:S/C:C/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Symfony versions prior to 2.7.38
Symfony versions prior to 2.8.31
Symfony versions prior to 3.2.14
Symfony versions prior to 3.3.13
Symfony versions prior to 3.4-BETA5
Symfony versions prior to 4.0-BETA5
Description
The issue exists due to insufficient input validation in the Form component of the Symfony platform. An attacker can exploit this by sending a specially crafted HTTP request where the
FileType value is sent as POST data, which can be interpreted as a local file path on the server-side. This could allow the attacker to disclose protected information.Recommendations
For Symfony versions prior to 2.7.38, update to version 2.7.38 or later.
For Symfony versions prior to 2.8.31, update to version 2.8.31 or later.
For Symfony versions prior to 3.2.14, update to version 3.2.14 or later.
For Symfony versions prior to 3.3.13, update to version 3.3.13 or later.
For Symfony versions prior to 3.4-BETA5, update to version 3.4-BETA5 or later.
For Symfony versions prior to 4.0-BETA5, update to version 4.0-BETA5 or later.
As a temporary workaround, consider adding additional checks about the value submitted to the
FileType field to prevent potential exploitation.Exploit
Fix
RCE
SSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Symfony