Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Symfony 2.7.x before 2.7.38, 2.8.x before 2.8.31, 3.2.x before 3.2.14, and 3.3.x before 3.3.13. DefaultAuthenticationSuccessHandler or DefaultAuthenticationFailureHandler takes the content of the _target_path parameter and generates a redirect response, but no check is performed on the path, which could be an absolute URL to an external domain. This Open redirect vulnerability can be exploited for example to mount effective phishing attacks.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sensio Labs Symfony 安全漏洞
Vulnerability Description
Sensio Labs Symfony是法国Sensio Labs公司的一套免费的、基于MVC架构的PHP开发框架。该框架提供常用的功能组件及工具，可用于快速创建复杂的WEB程序。 Sensio Labs Symfony中存在安全漏洞，该漏洞源于在没有检测路径的情况下，DefaultAuthenticationSuccessHandler或DefaultAuthenticationFailureHandler就直接接收了‘_target_path’参数内容并产生重定向响应。远程攻击者可利用该漏洞实施钓鱼攻
CVSS Information
N/A
Vulnerability Type
N/A