Логотип exploitDog
bind:CVE-2018-14774
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2018-14774

Количество 4

Количество 4

ubuntu логотип

CVE-2018-14774

почти 7 лет назад

An issue was discovered in HttpKernel in Symfony 2.7.0 through 2.7.48, 2.8.0 through 2.8.43, 3.3.0 through 3.3.17, 3.4.0 through 3.4.13, 4.0.0 through 4.0.13, and 4.1.0 through 4.1.2. When using HttpCache, the values of the X-Forwarded-Host headers are implicitly set as trusted while this should be forbidden, leading to potential host header injection.

CVSS3: 7.2
EPSS: Низкий
nvd логотип

CVE-2018-14774

почти 7 лет назад

An issue was discovered in HttpKernel in Symfony 2.7.0 through 2.7.48, 2.8.0 through 2.8.43, 3.3.0 through 3.3.17, 3.4.0 through 3.4.13, 4.0.0 through 4.0.13, and 4.1.0 through 4.1.2. When using HttpCache, the values of the X-Forwarded-Host headers are implicitly set as trusted while this should be forbidden, leading to potential host header injection.

CVSS3: 7.2
EPSS: Низкий
debian логотип

CVE-2018-14774

почти 7 лет назад

An issue was discovered in HttpKernel in Symfony 2.7.0 through 2.7.48, ...

CVSS3: 7.2
EPSS: Низкий
github логотип

GHSA-66p6-7p29-55p9

около 3 лет назад

Symfony Host Header Injection

CVSS3: 7.2
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2018-14774

An issue was discovered in HttpKernel in Symfony 2.7.0 through 2.7.48, 2.8.0 through 2.8.43, 3.3.0 through 3.3.17, 3.4.0 through 3.4.13, 4.0.0 through 4.0.13, and 4.1.0 through 4.1.2. When using HttpCache, the values of the X-Forwarded-Host headers are implicitly set as trusted while this should be forbidden, leading to potential host header injection.

CVSS3: 7.2
0%
Низкий
почти 7 лет назад
nvd логотип
CVE-2018-14774

An issue was discovered in HttpKernel in Symfony 2.7.0 through 2.7.48, 2.8.0 through 2.8.43, 3.3.0 through 3.3.17, 3.4.0 through 3.4.13, 4.0.0 through 4.0.13, and 4.1.0 through 4.1.2. When using HttpCache, the values of the X-Forwarded-Host headers are implicitly set as trusted while this should be forbidden, leading to potential host header injection.

CVSS3: 7.2
0%
Низкий
почти 7 лет назад
debian логотип
CVE-2018-14774

An issue was discovered in HttpKernel in Symfony 2.7.0 through 2.7.48, ...

CVSS3: 7.2
0%
Низкий
почти 7 лет назад
github логотип
GHSA-66p6-7p29-55p9

Symfony Host Header Injection

CVSS3: 7.2
0%
Низкий
около 3 лет назад

Уязвимостей на страницу