CVE-2018-19790

An open redirect was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x before 4.0.15, 4.1.x before 4.1.9 and 4.2.x before 4.2.1. By using backslashes in the `_failure_path` input field of login forms, an attacker can work around the redirection target restrictions and effectively redirect the user to any domain after login.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2018-12-18

Last modified

2024-08-05

Weaknesses

CWE-601

Affected products

• Debian Linux (Debian)
• Fedora (Fedoraproject)
• Symfony (Sensiolabs)

References

• http://www.securityfocus.com/bid/106249
• https://lists.debian.org/debian-lts-announce/2019/03/msg00009.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4TD3E7FZIXLVFG3SMFJPDE…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZMRJ7VTHCY5AZK24G4QGX…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OA4WVFN5FYPIXAPLWZI6N4…
• https://seclists.org/bugtraq/2019/May/21
• https://symfony.com/blog/cve-2018-19790-open-redirect-vulnerability-when-using-security-http
• https://www.debian.org/security/2019/dsa-4441