Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An open redirect was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x before 4.0.15, 4.1.x before 4.1.9 and 4.2.x before 4.2.1. By using backslashes in the `_failure_path` input field of login forms, an attacker can work around the redirection target restrictions and effectively redirect the user to any domain after login.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sensio Labs Symfony 安全漏洞
Vulnerability Description
Sensio Labs Symfony是法国Sensio Labs公司的一套免费的、基于MVC架构的PHP开发框架。该框架提供常用的功能组件及工具，可用于快速创建复杂的WEB程序。 Sensio Labs Symfony中存在开放重定向漏洞。攻击者可借助带有‘’的_failure_path input字段利用该漏洞绕过安全限制，将用户重定向到任意的域。以下版本受到影响：Sensio Labs Symfony 2.7.50之前的2.7.x版本，2.8.49之前的2.8.x版本，3.4.20之前的3.x版本，
CVSS Information
N/A
Vulnerability Type
N/A