PT-2024-34873 · Unknown · Symphony Php Framework

Jordi Boggiano · Published 2024-11-06 · Updated 2024-11-08 · CVE-2024-51736

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Symphony PHP framework versions prior to 5.4.46 Symphony PHP framework versions prior to 6.4.14 Symphony PHP framework versions prior to 7.1.7

Description The Symphony process module in the Symphony PHP framework executes commands in sub-processes. On Windows, when an executable file named cmd.exe is located in the current working directory, it will be called by the Process class when preparing command arguments, leading to possible hijacking.

Recommendations For versions prior to 5.4.46, upgrade to version 5.4.46 or later. For versions prior to 6.4.14, upgrade to version 6.4.14 or later. For versions prior to 7.1.7, upgrade to version 7.1.7 or later. As a temporary workaround, consider using the absolute path to cmd.exe when preparing command arguments with the Process class.

Exploit

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2024-51736

GHSA-QQ5C-677P-737Q

Affected Products

Symphony Php Framework

References · 17

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/51xxx/CVE-2024-51736.json · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/process/CVE-2024-51736.yaml · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2024-51736.yaml · Exploit
• https://github.com/symfony/symfony/security/advisories/GHSA-qq5c-677p-737q · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-51736 · Security Note
• https://osv.dev/vulnerability/CVE-2024-51736 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-qq5c-677p-737q · Vendor Advisory
• https://github.com/symfony/symfony · Note
• https://github.com/symfony/symfony/commit/18ecd03eda3917fdf901a48e72518f911c64a1c9 · Note
• https://twitter.com/MrHex88/status/1855022455842291941 · Twitter Post
• https://twitter.com/CheckmarxZero/status/1854737893085868091 · Twitter Post
• https://t.me/cvedetector/10043 · Telegram Post
• https://symfony.com/cve-2024-51736 · Note
• https://twitter.com/VulmonFeeds/status/1854368133030556043 · Twitter Post
• https://twitter.com/Checkmarx/status/1854581183428149337 · Twitter Post