CyberRota Analysis
AI-GeneratedThe vulnerability affects Symfony versions 7.1.0 to 7.4.12 and 8.0.12, specifically in the Cas2Handler component, where an improperly configured trusted hosts setting allows an attacker to exploit a reflected Host header. This can lead to unauthorized authentication, enabling an attacker to impersonate a victim by replaying their ticket against the Symfony application. Organizations using affected Symfony versions should prioritize patching to mitigate the risk of credential theft and unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 7.1.0 until 7.4.12 and 8.0.12, Cas2Handler builds the CAS service parameter from Request::getSchemeAndHttpHost(), which reflects an attacker-controlled Host header when framework.trusted_hosts is not configured; an attacker controlling another application registered with the same CAS server can replay a victim ticket against the Symfony application and authenticate as the victim. This issue is fixed in versions 7.4.12 and 8.0.12.
Related CVEs
Other vulnerabilities affecting the same vendor(s)