Lucene search
K

CVE-2021-41267

🗓️ 24 Nov 2021 18:55:17Reported by GitHub_MType 
cve
 cve
🔗 web.nvd.nist.gov👁 103 Views

Symfony/Http-Kernel in Symfony 5.2 onward allows web cache poisoning via `X-Forwarded-Prefix` header

Related
Detection
Affected
Refs
ReporterTitlePublishedViews
Family
Circl
CVE-2021-41267
24 Nov 202122:27
circl
CNNVD
Sensio Labs Symfony 环境问题漏洞
24 Nov 202100:00
cnnvd
Cvelist
CVE-2021-41267 Webcache Poisoning in Symfony
24 Nov 202118:55
cvelist
Debian CVE
CVE-2021-41267
24 Nov 202118:55
debiancve
EUVD
EUVD-2021-2377
7 Oct 202500:30
euvd
Friends Of PHP
CVE-2021-41267: Webcache Poisoning via X-Forwarded-Prefix and sub-request
9 Oct 202112:10
friendsofphp
Friends Of PHP
CVE-2021-41267: Webcache Poisoning via X-Forwarded-Prefix and sub-request
9 Oct 202112:10
friendsofphp
Github Security Blog
Webcache Poisoning in symfony/http-kernel
24 Nov 202120:04
github
NVD
CVE-2021-41267
24 Nov 202119:15
nvd
OSV
BIT-SYMFONY-2021-41267
6 Mar 202411:07
osv
Rows per page
NVD
Vulners
Node
sensiolabssymfonyRange5.2.05.3.12
[
  {
    "product": "symfony",
    "vendor": "symfony",
    "versions": [
      {
        "status": "affected",
        "version": ">= 5.2.0, < 5.3.12"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 04:08Current
6.2Medium risk
Vulners AI Score6.2
CVSS 24.3
CVSS 3.16.5
EPSS0.01239
103