2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2018-19790" ,
"sourceIdentifier" : "cve@mitre.org" ,
"published" : "2018-12-18T22:29:05.040" ,
2023-11-07 21:03:21 +00:00
"lastModified" : "2023-11-07T02:55:44.227" ,
2023-04-24 12:24:31 +02:00
"vulnStatus" : "Modified" ,
"descriptions" : [
{
"lang" : "en" ,
"value" : "An open redirect was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x before 4.0.15, 4.1.x before 4.1.9 and 4.2.x before 4.2.1. By using backslashes in the `_failure_path` input field of login forms, an attacker can work around the redirection target restrictions and effectively redirect the user to any domain after login."
} ,
{
"lang" : "es" ,
"value" : "Se ha descubierto una redirecci\u00f3n abierta en Symfony en versiones 2.7.x anteriores a la 2.7.50, versiones 2.8.x anteriores a la 2.8.49, versiones 3.x anteriores a la 3.4.20, versiones 4.0.x anteriores a la 4.0.15, versiones 4.1.x anteriores a la 4.1.9 y versiones 4.2.x anteriores a la 4.2.1. Mediante el uso de barras invertidas en el campo de entrada \"_failure_path\" de los formularios de inicio de sesi\u00f3n, un atacante puede sortear las restricciones de destino de redirecci\u00f3n y redirigir de forma efectiva al usuario a cualquier dominio una vez ha iniciado sesi\u00f3n."
}
] ,
"metrics" : {
"cvssMetricV30" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.0" ,
"vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" ,
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "REQUIRED" ,
"scope" : "CHANGED" ,
"confidentialityImpact" : "LOW" ,
"integrityImpact" : "LOW" ,
"availabilityImpact" : "NONE" ,
"baseScore" : 6.1 ,
"baseSeverity" : "MEDIUM"
} ,
"exploitabilityScore" : 2.8 ,
"impactScore" : 2.7
}
] ,
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N" ,
"accessVector" : "NETWORK" ,
"accessComplexity" : "MEDIUM" ,
"authentication" : "NONE" ,
"confidentialityImpact" : "PARTIAL" ,
"integrityImpact" : "PARTIAL" ,
"availabilityImpact" : "NONE" ,
"baseScore" : 5.8
} ,
"baseSeverity" : "MEDIUM" ,
"exploitabilityScore" : 8.6 ,
"impactScore" : 4.9 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : true
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-601"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "2.7.0" ,
"versionEndExcluding" : "2.7.50" ,
"matchCriteriaId" : "C920A156-6069-4228-8566-7E6702FEC963"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "2.8.0" ,
"versionEndExcluding" : "2.8.49" ,
"matchCriteriaId" : "84F566E2-4BE2-4EFD-9800-D29DE8E53886"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "3.0.0" ,
"versionEndExcluding" : "3.4.20" ,
"matchCriteriaId" : "934D9B80-E632-4996-9BF0-8D34C4CFD23F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "4.0.0" ,
"versionEndExcluding" : "4.0.15" ,
"matchCriteriaId" : "377BBA51-611E-4146-898A-A103B511EA83"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "4.1.0" ,
"versionEndExcluding" : "4.1.9" ,
"matchCriteriaId" : "9F29F714-E604-43BF-9707-1AFD5E4D2F05"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "4.2.0" ,
"versionEndExcluding" : "4.2.1" ,
"matchCriteriaId" : "E9F91E7F-D094-4C23-AF65-F8CA9F146006"
}
]
}
]
} ,
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:fedoraproject:fedora:28:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "DC1BD7B7-6D88-42B8-878E-F1318CA5FCAF"
}
]
}
]
} ,
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"
}
]
}
]
}
] ,
"references" : [
{
"url" : "http://www.securityfocus.com/bid/106249" ,
"source" : "cve@mitre.org" ,
"tags" : [
"Third Party Advisory" ,
"VDB Entry"
]
} ,
{
"url" : "https://lists.debian.org/debian-lts-announce/2019/03/msg00009.html" ,
"source" : "cve@mitre.org" ,
"tags" : [
"Mailing List" ,
"Third Party Advisory"
]
} ,
{
2023-11-07 21:03:21 +00:00
"url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4TD3E7FZIXLVFG3SMFJPDEKPZ26TJOW7/" ,
"source" : "cve@mitre.org"
2023-04-24 12:24:31 +02:00
} ,
{
2023-11-07 21:03:21 +00:00
"url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZMRJ7VTHCY5AZK24G4QGX36RLUDTDKE/" ,
"source" : "cve@mitre.org"
2023-04-24 12:24:31 +02:00
} ,
{
2023-11-07 21:03:21 +00:00
"url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OA4WVFN5FYPIXAPLWZI6N425JHHDSWAZ/" ,
"source" : "cve@mitre.org"
2023-04-24 12:24:31 +02:00
} ,
{
"url" : "https://seclists.org/bugtraq/2019/May/21" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "https://symfony.com/blog/cve-2018-19790-open-redirect-vulnerability-when-using-security-http" ,
"source" : "cve@mitre.org" ,
"tags" : [
"Patch" ,
"Vendor Advisory"
]
} ,
{
"url" : "https://www.debian.org/security/2019/dsa-4441" ,
"source" : "cve@mitre.org"
}
]
}
