CyberRota Analysis
AI-GeneratedThe vulnerability affects Symfony UX versions 2.2.0 to 2.36.0 and 3.1.0, specifically in the handling of user-supplied queries for the autocomplete endpoint, which can be exploited by unauthenticated users to perform broad searches or extract sensitive data through SQL injection. This poses a significant risk to applications using these versions, as it can lead to unauthorized data exposure. Organizations utilizing affected versions of Symfony UX should prioritize updating to versions 2.36.0 or 3.1.0 to mitigate this high-severity vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Symfony UX is a JavaScript ecosystem for Symfony. From 2.2.0 until 2.36.0 and 3.1.0, Symfony\UX\Autocomplete\Doctrine\EntitySearchUtil::addSearchClause() builds the LIKE expression used by the autocomplete endpoint by wrapping the client-supplied query in %...% without escaping SQL LIKE wildcards (%, _, \), allowing unauthenticated users to turn the public BaseEntityAutocompleteType endpoint into a broad matcher or blind boolean oracle against every column in default searchable_fields. This issue is fixed in versions 2.36.0 and 3.1.0.
Related CVEs
Other vulnerabilities affecting the same vendor(s)