Exceptions displayed in non-debug configurations in Symfony

🗓️ 30 Mar 2020 20:09:31Reported by GitHub Advisory DatabaseType

Exceptions displayed in non-debug configurations in Symfony. Errorhandler class now escapes all properties to prevent stacktrace display in non-debug environments

Reporter	Title	Published	Views	Family All 19
attackerkb	CVE-2020-5274	30 Mar 202020:15	–	attackerkb
CNVD	Unspecified Vulnerability in Sensio Labs Symfony (CNVD-2020-29879)	31 Mar 202000:00	–	cnvd
CVE	CVE-2020-5274	30 Mar 202019:40	–	cve
Cvelist	CVE-2020-5274 Exceptions displayed in non-debug configurations in Symfony	30 Mar 202019:40	–	cvelist
Debian CVE	CVE-2020-5274	30 Mar 202019:40	–	debiancve
EUVD	EUVD-2020-0350	7 Oct 202500:30	–	euvd
Friends Of PHP	CVE-2020-5274: Fix Exception message escaping rendered by ErrorHandler	30 Mar 202014:00	–	friendsofphp
Friends Of PHP	CVE-2020-5274: Fix Exception message escaping rendered by ErrorHandler	30 Mar 202014:00	–	friendsofphp
Mend	CVE-2020-5274	30 Mar 202019:40	–	mend
NVD	CVE-2020-5274	30 Mar 202020:15	–	nvd

Vulners

Node

symfony symfonyRange5.0.0–5.0.4composer

symfony symfonyRange4.4.0–4.4.4composer

symfony error-handlerRange5.0.0–5.0.4composer

symfony error-handlerRange4.4.0–4.4.4composer

Source	Link
github	www.github.com/symfony/symfony/security/advisories/GHSA-m884-279h-32v2
github	www.github.com/symfony/symfony/commit/629d21b800a15dc649fb0ae9ed7cd9211e7e45db
github	www.github.com/symfony/symfony/commit/cf80224589ac05402d4f72f5ddf80900ec94d5ad
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-5274
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/error-handler/CVE-2020-5274.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2020-5274.yaml
symfony	www.symfony.com/cve-2020-5274
github	www.github.com/advisories/GHSA-m884-279h-32v2

06 Feb 2024 13:30Current

0.3Low risk

Vulners AI Score0.3

CVSS 3.14.6 - 5.4

CVSS 25.5

EPSS0.01197

CWE-209