CyberRota Analysis
AI-GeneratedThe X509Authenticator in Symfony versions prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12 is vulnerable due to an unanchored regex that improperly extracts user identifiers from SSL client certificates, enabling attackers to authenticate as victims using specially crafted certificates. This critical vulnerability poses a significant risk to applications relying on Symfony for user authentication, particularly those handling sensitive data or user identities. Organizations using affected versions should prioritize upgrading to the patched releases to mitigate the risk of unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, X509Authenticator extracts the user identifier from $_SERVER['SSL_CLIENT_S_DN'] with an unanchored regex that matches emailAddress= anywhere in the distinguished name, allowing an attacker with a trusted certificate containing emailAddress=victim inside another RDN value such as CN to authenticate as the victim. This issue is fixed in versions 5.4.52, 6.4.40, 7.4.12, and 8.0.12.
Related CVEs
Other vulnerabilities affecting the same vendor(s)