Symfony UrlGenerator Route-Requirement Bypass Leading to URL Injection (CVE-2024-45085)
Security Advisory
CVE-2024-45085
Medium
Symfony
Affected:
- symfony/routing <5.4.52
- symfony/routing >=6 <6.4.40
- symfony/routing >=7 <7.4.12
- symfony/routing >=8 <8.0.12
- symfony/symfony <5.4.52
Fixed in:
- symfony/routing 5.4.52
- symfony/routing 6.4.40
- symfony/routing 7.4.12
- symfony/routing 8.0.12
- symfony/symfony 5.4.52
Referenced CVEs:
CVE-2026-45065
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.