Log in Start free

Vulnerability · Published Nov 10, 2023 · Assigned by GitHub_M

CVE-2023-46734Symfony potential Cross-site Scripting vulnerabilities in CodeExtension filters

Medium 6.1

In plain English

A medium-severity cross-site scripting in symfony from symfony. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.1Medium
Exploit odds (30 days)0.7%top 47.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Starting in versions 2.0.0, 5.0.0, and 6.0.0 and prior to versions 4.4.51, 5.4.31, and 6.3.8, some Twig filters in CodeExtension use `is_safe=html` but don't actually ensure their input is safe. As of versions 4.4.51, 5.4.31, and 6.3.8, Symfony now escapes the output of the affected filters.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12symfony5.4.23+dfsg-1+deb12u1DEBIAN-CVE-2023-46734
Debian:13symfony5.4.31+dfsg-1DEBIAN-CVE-2023-46734
Debian:14symfony5.4.31+dfsg-1DEBIAN-CVE-2023-46734
Packagistsymfony/symfony5.4.31GHSA-q847-2q57-wmr3
Packagistsymfony/symfony4.4.51GHSA-q847-2q57-wmr3
Packagistsymfony/symfony6.3.8GHSA-q847-2q57-wmr3
Packagistsymfony/twig-bridge4.4.51GHSA-q847-2q57-wmr3
Packagistsymfony/twig-bridge6.3.8GHSA-q847-2q57-wmr3
Packagistsymfony/twig-bridge5.4.31GHSA-q847-2q57-wmr3

Affected products (as reported)

VendorProductVersions
symfony symfony >= 2.0.0, < 4.4.51>= 5.0.0, < 5.4.31>= 6.0.0, < 6.3.8

Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

References