Логотип exploitDog
bind:CVE-2018-14774
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2018-14774

Количество 4

Количество 4

ubuntu логотип

CVE-2018-14774

больше 7 лет назад

An issue was discovered in HttpKernel in Symfony 2.7.0 through 2.7.48, 2.8.0 through 2.8.43, 3.3.0 through 3.3.17, 3.4.0 through 3.4.13, 4.0.0 through 4.0.13, and 4.1.0 through 4.1.2. When using HttpCache, the values of the X-Forwarded-Host headers are implicitly set as trusted while this should be forbidden, leading to potential host header injection.

CVSS3: 7.2
EPSS: Низкий
nvd логотип

CVE-2018-14774

больше 7 лет назад

An issue was discovered in HttpKernel in Symfony 2.7.0 through 2.7.48, 2.8.0 through 2.8.43, 3.3.0 through 3.3.17, 3.4.0 through 3.4.13, 4.0.0 through 4.0.13, and 4.1.0 through 4.1.2. When using HttpCache, the values of the X-Forwarded-Host headers are implicitly set as trusted while this should be forbidden, leading to potential host header injection.

CVSS3: 7.2
EPSS: Низкий
debian логотип

CVE-2018-14774

больше 7 лет назад

An issue was discovered in HttpKernel in Symfony 2.7.0 through 2.7.48, ...

CVSS3: 7.2
EPSS: Низкий
github логотип

GHSA-66p6-7p29-55p9

больше 3 лет назад

Symfony Host Header Injection

CVSS3: 7.2
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2018-14774

An issue was discovered in HttpKernel in Symfony 2.7.0 through 2.7.48, 2.8.0 through 2.8.43, 3.3.0 through 3.3.17, 3.4.0 through 3.4.13, 4.0.0 through 4.0.13, and 4.1.0 through 4.1.2. When using HttpCache, the values of the X-Forwarded-Host headers are implicitly set as trusted while this should be forbidden, leading to potential host header injection.

CVSS3: 7.2
0%
Низкий
больше 7 лет назад
nvd логотип
CVE-2018-14774

An issue was discovered in HttpKernel in Symfony 2.7.0 through 2.7.48, 2.8.0 through 2.8.43, 3.3.0 through 3.3.17, 3.4.0 through 3.4.13, 4.0.0 through 4.0.13, and 4.1.0 through 4.1.2. When using HttpCache, the values of the X-Forwarded-Host headers are implicitly set as trusted while this should be forbidden, leading to potential host header injection.

CVSS3: 7.2
0%
Низкий
больше 7 лет назад
debian логотип
CVE-2018-14774

An issue was discovered in HttpKernel in Symfony 2.7.0 through 2.7.48, ...

CVSS3: 7.2
0%
Низкий
больше 7 лет назад
github логотип
GHSA-66p6-7p29-55p9

Symfony Host Header Injection

CVSS3: 7.2
0%
Низкий
больше 3 лет назад

Уязвимостей на страницу