Symfony allows internal address and port enumeration by NoPrivateNetworkHttpClient

🗓️ 06 Nov 2024 15:16:09Reported by GitHub Advisory DatabaseType

Symfony NoPrivateNetworkHttpClient IP/port enumeration fi

Reporter	Title	Published	Views	Family All 45
AstraLinux	Astra Linux - уязвимость в symfony	11 Feb 202507:35	–	astralinux
Circl	CVE-2024-50342	6 Nov 202421:10	–	circl
CNNVD	Symfony 信息泄露漏洞	6 Nov 202400:00	–	cnnvd
CVE	CVE-2024-50342	6 Nov 202421:03	–	cve
Cvelist	CVE-2024-50342 Internal address and port enumeration allowed by NoPrivateNetworkHttpClient in symfony/http-client	6 Nov 202421:03	–	cvelist
Debian	[SECURITY] [DSA 5809-1] symfony security update	11 Nov 202419:06	–	debian
Debian CVE	CVE-2024-50342	6 Nov 202421:03	–	debiancve
Tenable Nessus	Debian dsa-5809 : php-symfony - security update	11 Nov 202400:00	–	nessus
Tenable Nessus	Fedora 41 : php-bartlett-PHP-CompatInfo (2024-16a71b7cf5)	16 Nov 202400:00	–	nessus
Tenable Nessus	Fedora 40 : php-bartlett-PHP-CompatInfo (2024-727ecb90c7)	16 Nov 202400:00	–	nessus

Vulners

Node

symfony symfonyRange7.0.0–7.1.8composer

symfony symfonyRange6.0.0–6.4.15composer

symfony symfonyRange4.3.0–5.4.47composer

symfony http-clientRange7.0.0–7.1.8composer

symfony http-clientRange6.0.0–6.4.15composer

symfony http-clientRange4.3.0–5.4.47composer

Source	Link
github	www.github.com/symfony/symfony/security/advisories/GHSA-9c3x-r3wp-mgxm
github	www.github.com/symfony/symfony/commit/296d4b34a33b1a6ca5475c6040b3203622520f5b
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/http-client/CVE-2024-50342.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2024-50342.yaml
symfony	www.symfony.com/cve-2024-50342
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-50342
github	www.github.com/advisories/GHSA-9c3x-r3wp-mgxm

13 Nov 2024 18:51Current

3.8Low risk

Vulners AI Score3.8

CVSS 3.13.1 - 4.3

EPSS0.00502

SSVC