EUVD-2022-5125

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Open redirect vulnerability in Symfony could lead to phishing attacks via external URL redirects

Reporter	Title	Published	Views	Family All 33
ATTACKERKB	CVE-2017-16652	13 Jun 201816:29	–	attackerkb
CVE	CVE-2017-16652	13 Jun 201816:00	–	cve
Cvelist	CVE-2017-16652	13 Jun 201816:00	–	cvelist
Debian	[SECURITY] [DLA 1707-1] symfony security update	10 Mar 201901:19	–	debian
Debian CVE	CVE-2017-16652	13 Jun 201816:00	–	debiancve
Tenable Nessus	Debian DLA-1707-1 : symfony security update	11 Mar 201900:00	–	nessus
Tenable Nessus	Fedora 27 : php-symfony (2018-2bdfc9dc67)	9 Jul 201800:00	–	nessus
Tenable Nessus	Fedora 27 : php-symfony3 (2018-c8ddc44bbb)	9 Jul 201800:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2017-16652	27 Aug 202500:00	–	nessus
Fedora	[SECURITY] Fedora 27 Update: php-symfony3-3.3.17-1.fc27	7 Jul 201822:17	–	fedora

[
  {
    "enisaIdVendor": [
      {
        "id": "a2bfe160-813e-3270-9d05-0de7ffc7494a",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "3d8019d0-a4bd-30c7-b963-8f7502fe568e",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2017-16652
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security-http/CVE-2017-16652.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security/CVE-2017-16652.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2017-16652.yaml
github	www.github.com/symfony/symfony
lists	www.lists.debian.org/debian-lts-announce/2019/03/msg00009.html
symfony	www.symfony.com/blog/cve-2017-16652-open-redirect-vulnerability-on-security-handlers
symfony	www.symfony.com/cve-2017-16652

03 Oct 2025 20:07Current

6.5Medium risk

Vulners AI Score6.5

CVSS 36.1

CVSS 25.8

EPSS0.00222