CVE-2014-4931
Code injection in the way Symfony implements translation caching in FrameworkBundle
描述
When investigating issue [#11093](https://github.com/symfony/symfony/issues/11093), [Jeremy Derussé](https://connect.sensiolabs.com/profile/jderusse) found a serious code injection issue in the way Symfony implements translation caching in FrameworkBundle. - Your Symfony application is vulnerable if you meet the following conditions: - You are using the Symfony translation system from FrameworkBundle (so basically if you are using Symfony full-stack -- you are not affected if you are using the Translation component with Silex for instance); You don't sanitize locales coming from a URL (any route with a _locale argument for instance): When vulnerable, an attacker can submit a non-valid locale value that can contain some PHP code that will be executed by Symfony. That's because the locale value is dumped into a PHP file generated in the cache without being sanitized first.
如何修補 CVE-2014-4931
要修補 CVE-2014-4931,請將受影響套件升級到下列已修補版本。
- —升級至 2.3.18 或更新版本
- —升級至 2.3.19 或更新版本
CVE-2014-4931 正在被利用嗎?
目前沒有被利用訊號。CVE-2014-4931 既不在 CISA KEV 也沒有最新的 EPSS 分數。
受影響套件(2)
- >= 2.0.0, < 2.3.18
- >= 2.0.0, < 2.3.19
CVSS 分數
| 來源 | 版本 | 嚴重程度 | 向量 |
|---|---|---|---|
| osv | CVSS 3.1 | HIGH7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |