PT-2024-10556 · Symfony+1 · Symfony Httpkernel+1

Published 2024-05-30 · Updated 2024-05-30 · CVE-2014-5245

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Symfony HttpKernel component versions 2.2.X through 2.5.X

Description This issue affects applications with the ESI feature enabled and a proxy in front of the web application. The FragmentHandler considers requests to render fragments as coming from a trusted source, even if the client requests them directly, due to the inability to distinguish between ESI requests done by a proxy like Varnish and faked fragment requests coming directly from the client.

Recommendations For Symfony 2.3.X, update to version 2.3.19 or later. For Symfony 2.4.X, update to version 2.4.9 or later. For Symfony 2.5.X, update to version 2.5.4 or later. For Symfony 2.2.X, no official fix is provided as it is not maintained anymore; consider using the Varnish configuration workaround: sub vcl recv { if (req.restarts == 0 && req.url ~ "^/ fragment") { error 400; } }

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2014-5245

GHSA-WVJV-P5RR-MMQM

Affected Products

Symfony Httpkernel

Varnish

References · 6

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2014-5245.yaml · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/http-kernel/CVE-2014-5245.yaml · Exploit
• https://osv.dev/vulnerability/GHSA-wvjv-p5rr-mmqm · Vendor Advisory
• https://github.com/symfony/symfony/commit/654b1f281e09dd96ffbbd3da815411700423ecf5 · Note
• https://github.com/symfony/symfony/pull/11831 · Note
• https://symfony.com/cve-2014-5245 · Note