Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in HttpKernel in Symfony 2.7.0 through 2.7.48, 2.8.0 through 2.8.43, 3.3.0 through 3.3.17, 3.4.0 through 3.4.13, 4.0.0 through 4.0.13, and 4.1.0 through 4.1.2. When using HttpCache, the values of the X-Forwarded-Host headers are implicitly set as trusted while this should be forbidden, leading to potential host header injection.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sensio Labs Symfony HttpKernel 安全漏洞
Vulnerability Description
Sensio Labs Symfony是法国Sensio Labs公司的一套免费的、基于MVC架构的PHP开发框架。该框架提供常用的功能组件及工具，可用于快速创建复杂的WEB程序。HttpKernel是其中的一个通过利用EventDispatcher组件将请求换转为响应的结构化进程组件。 Sensio Labs Symfony中的HttpKernel存在安全漏洞。攻击者可利用该漏洞注入主机包头。以下版本受到影响：Sensio Labs Symfony 2.7.0版本至2.7.48版本，2.8.0版本至2.
CVSS Information
N/A
Vulnerability Type
N/A