CyberRota Analysis
AI-GeneratedThe vulnerability in Symfony affects versions from 6.1.0-BETA1 up to 6.4.40, 7.4.12, and 8.0.12, allowing off-allowlist URLs to bypass sanitization due to discrepancies between RFC 3986 and WHATWG URL parsing. This can lead to potential security risks, such as the execution of malicious links or media. Developers and organizations using these specific Symfony versions should prioritize updating to the patched releases to mitigate the risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0-BETA1 until 6.4.40, 7.4.12, and 8.0.12, HtmlSanitizer URL sanitization can allow off-allowlist URLs through allowLinkHosts() or allowMediaHosts() because UrlSanitizer::parse() follows RFC 3986 while browsers follow WHATWG URL parsing, and because <area href> is checked against the media policy rather than the link policy. This issue is fixed in versions 6.4.40, 7.4.12, and 8.0.12.
Related CVEs
Other vulnerabilities affecting the same vendor(s)