PT-2020-18349 · Symfony · Symfony

Xavier Lacot · Published 2020-03-30 · Updated 2024-03-06 · CVE-2020-5255

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Symfony versions prior to 4.4.7 Symfony versions prior to 5.0.7

Description When a Response does not contain a Content-Type header, affected versions of Symfony can fallback to the format defined in the Accept header of the request, leading to a possible mismatch between the response's content and Content-Type header. When the response is cached, this can prevent the use of the website by other users.

Recommendations For Symfony versions prior to 4.4.7, update to version 4.4.7 or later. For Symfony versions prior to 5.0.7, update to version 5.0.7 or later. As a temporary workaround, consider disabling the use of the Accept header to guess the Content-Type until a patch is available.

Exploit

Fix

RCE

Weakness Enumeration

CWE-435

CWE-20

Related Identifiers

BIT-SYMFONY-2020-5255

CVE-2020-5255

GHSA-MCX4-F5F5-4859

Affected Products

Symfony

References · 15

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2020-5255.yaml · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/http-foundation/CVE-2020-5255.yaml · Exploit
• https://github.com/symfony/symfony/commit/dca343442e6a954f96a2609e7b4e9c21ed6d74e6 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-5255 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-5255 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2020-5255 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/C36JLPHUPKDFAX6D5WYFC4ALO2K7RDUQ · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-5255 · Security Note
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C36JLPHUPKDFAX6D5WYFC4ALO2K7RDUQ · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-mcx4-f5f5-4859 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-symfony-2020-5255 · Vendor Advisory
• https://github.com/symfony/symfony/security/advisories/GHSA-mcx4-f5f5-4859 · Note
• https://symfony.com/cve-2020-5255 · Note
• https://symfony.com/blog/cve-2020-5255-prevent-cache-poisoning-via-a-response-content-type-header · Note
• https://t.me/cvenotify/2264 · Telegram Post