Symfony has an incorrect response from Validator when input ends with `\n`

🗓️ 06 Nov 2024 15:21:08Reported by GitHub Advisory DatabaseType

Symfony Validator incorrect response fix for input ending with new line character

Reporter	Title	Published	Views	Family All 45
AstraLinux	Astra Linux – Vulnerability in symfony	11 Feb 202507:35	–	astralinux
BDU FSTEC	The vulnerability of the Symfony software platform for developing and managing web applications arises from the lack of measures taken to neutralize special elements, allowing attackers to execute arbitrary code.	14 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the http-client component of the Symfony software development and web application management platform allows attackers to access confidential data.	3 Jul 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the validator component in the Symfony software development and web application management platform allows a hacker to access confidential data.	3 Jul 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the http-foundation component of the Symfony software development and web application management platform allows attackers to access confidential data.	3 Jul 202500:00	–	bdu_fstec
Circl	CVE-2024-50343	6 Nov 202421:25	–	circl
CNNVD	Symfony 输入验证错误漏洞	6 Nov 202400:00	–	cnnvd
CVE	CVE-2024-50343	6 Nov 202421:00	–	cve
Cvelist	CVE-2024-50343 Incorrect response from Validator when input ends with `\n` in symfony/validator	6 Nov 202421:00	–	cvelist
Debian	[SECURITY] [DLA 4200-1] symfony security update	31 May 202519:35	–	debian

Vulners

Node

symfony validatorRange7.0.0–7.1.4composer

symfony validatorRange6.0.0–6.4.11composer

symfony validatorRange<5.4.43composer

symfony symfonyRange7.0.0–7.1.4composer

symfony symfonyRange6.0.0–6.4.11composer

symfony symfonyRange<5.4.43composer

Source	Link
github	www.github.com/symfony/symfony/security/advisories/GHSA-g3rh-rrhp-jhh9
github	www.github.com/symfony/symfony/commit/7d1032bbead9a4229b32fa6ebca32681c80cb76f
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2024-50343.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/validator/CVE-2024-50343.yaml
symfony	www.symfony.com/cve-2024-50343
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-50343
lists	www.lists.debian.org/debian-lts-announce/2025/05/msg00051.html
github	www.github.com/advisories/GHSA-g3rh-rrhp-jhh9

03 Nov 2025 22:49Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.13.1

EPSS0.00246

SSVC