CVE-2018-19790

Summary

An open redirect was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x before 4.0.15, 4.1.x before 4.1.9 and 4.2.x before 4.2.1. By using backslashes in the _failure_path input field of login forms, an attacker can work around the redirection target restrictions and effectively redirect the user to any domain after login.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OA4WVFN5FYPIXAPLWZI6N425JHHDSWAZ/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4TD3E7FZIXLVFG3SMFJPDEKPZ26TJOW7/
• http://www.securityfocus.com/bid/106249
• https://lists.debian.org/debian-lts-announce/2019/03/msg00009.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZMRJ7VTHCY5AZK24G4QGX36RLUDTDKE/
• https://symfony.com/blog/cve-2018-19790-open-redirect-vulnerability-when-using-security-http
• https://www.debian.org/security/2019/dsa-4441
• https://seclists.org/bugtraq/2019/May/21

References

• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OA4WVFN5FYPIXAPLWZI6N425JHHDSWAZ/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4TD3E7FZIXLVFG3SMFJPDEKPZ26TJOW7/
• http://www.securityfocus.com/bid/106249
• https://lists.debian.org/debian-lts-announce/2019/03/msg00009.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZMRJ7VTHCY5AZK24G4QGX36RLUDTDKE/
• https://symfony.com/blog/cve-2018-19790-open-redirect-vulnerability-when-using-security-http
• https://www.debian.org/security/2019/dsa-4441
• https://seclists.org/bugtraq/2019/May/21

• ←Previous
• Next→