Open Redirect Vulnerability in Symfony Package
Summary
CVE-2018-19790: An open redirect was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x before 4.0.15, 4.1.x before 4.1.9 and 4.2.x before 4.2.1. Affects symfony across 3 version ranges.
< 3.4.20+dfsg-1
>= 9975b1eca3de4db792a2c3e4e16f676a4aadcd46, < 0848ce2c7f3c3ba6cece3f9457a96b176b05860c
>= de2f3d51160791ef254010953dbde178fee9845f, < 2e117acf97b059a9da3444a11ea420f1ac7c31d8
Fixed in 3.4.20+dfsg-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Symfony is a robust PHP framework designed for building web applications. It provides reusable components and a structured architecture that enhances development efficiency. However, certain versions of Symfony are vulnerable to an open redirect issue, which can compromise user security by allowing attackers to redirect users to malicious sites after login.
Vulnerability Detail
An open redirect vulnerability was identified in Symfony versions 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x before 4.0.15, 4.1.x before 4.1.9, and 4.2.x before 4.2.1. This vulnerability arises from improper handling of the '_failure_path' input field in login forms, where an attacker can exploit backslashes to bypass redirection restrictions, leading to potential phishing attacks and unauthorized access to sensitive information.
How To Fix
Minimum fixed version
3.4.20+dfsg-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade symfonyTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can validate the '_failure_path' input to ensure it does not contain any backslashes or redirect to untrusted domains. Implement server-side checks to sanitize user input before processing it.
Conclusion
The open redirect vulnerability in Symfony poses significant risks to user security and data integrity. It is crucial to update to a secure version of the package and implement necessary input validation to protect against potential exploitation.
See every vulnerability recorded for symfony →
FAQ
An open redirect vulnerability allows attackers to redirect users to arbitrary URLs, potentially leading to phishing attacks.
Symfony versions 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x before 4.0.15, 4.1.x before 4.1.9, and 4.2.x before 4.2.1 are affected.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
The CVSS score of this vulnerability is 6.1, indicating a medium severity level.
If immediate updates are not possible, implement input validation and sanitization as a temporary workaround to mitigate the risk.
Related vulnerabilities
Recent vulnerabilities recorded for symfony.
