Symfony vulnerable to open redirect via browser-sanitized URLs

🗓️ 06 Nov 2024 15:22:09Reported by GitHub Advisory DatabaseType

Symfony open redirect vulnerability fi

Reporter	Title	Published	Views	Family All 45
AstraLinux	Astra Linux – Vulnerability in symfony	19 Jun 202611:10	–	astralinux
BDU FSTEC	The vulnerability of the http-foundation component of the Symfony software development and web application management platform allows attackers to access confidential data.	3 Jul 202500:00	–	bdu_fstec
Circl	CVE-2024-50345	6 Nov 202421:01	–	circl
CNNVD	Symfony 输入验证错误漏洞	6 Nov 202400:00	–	cnnvd
CVE	CVE-2024-50345	6 Nov 202420:56	–	cve
Cvelist	CVE-2024-50345 Open redirect via browser-sanitized URLs in symfony/http-foundation	6 Nov 202420:56	–	cvelist
Debian	[SECURITY] [DLA 4200-1] symfony security update	31 May 202519:35	–	debian
Debian	[SECURITY] [DSA 5809-1] symfony security update	11 Nov 202419:06	–	debian
Debian CVE	CVE-2024-50345	6 Nov 202420:56	–	debiancve
Tenable Nessus	Debian dla-4200 : php-symfony - security update	2 Jun 202500:00	–	nessus

Vulners

Node

symfony http-foundationRange7.0.0–7.1.7composer

symfony http-foundationRange6.0.0–6.4.14composer

Source	Link
github	www.github.com/symfony/symfony/security/advisories/GHSA-mrqx-rp3w-jpjp
github	www.github.com/symfony/symfony/commit/5a9b08e5740af795854b1b639b7d45b9cbfe8819
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/http-foundation/CVE-2024-50345.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2024-50345.yaml
symfony	www.symfony.com/cve-2024-50345
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-50345
url	www.url.spec.whatwg.org/
lists	www.lists.debian.org/debian-lts-announce/2025/05/msg00051.html
github	www.github.com/advisories/GHSA-mrqx-rp3w-jpjp

03 Nov 2025 22:49Current

3.9Low risk

Vulners AI Score3.9

CVSS 3.13.1 - 6.1

EPSS0.00565

SSVC