Symfony Open Redirect

🗓️ 14 May 2022 01:21:36Reported by GitHub Advisory DatabaseType

Symfony Open Redirect vulnerability in DefaultAuthenticationSuccessHandler and DefaultAuthenticationFailureHandle

Reporter	Title	Published	Views	Family All 34
ATTACKERKB	CVE-2017-16652	13 Jun 201816:29	–	attackerkb
BDU FSTEC	The vulnerabilities of the DefaultAuthenticationSuccessHandler and DefaultAuthenticationFailureHandler components of the Symfony software development and web application management platform allow attackers to carry out phishing attacks and gain access to protected information.	19 Nov 201900:00	–	bdu_fstec
CVE	CVE-2017-16652	13 Jun 201816:00	–	cve
Cvelist	CVE-2017-16652	13 Jun 201816:00	–	cvelist
Debian	[SECURITY] [DLA 1707-1] symfony security update	10 Mar 201901:19	–	debian
Debian CVE	CVE-2017-16652	13 Jun 201816:00	–	debiancve
Tenable Nessus	Debian DLA-1707-1 : symfony security update	11 Mar 201900:00	–	nessus
Tenable Nessus	Fedora 27 : php-symfony (2018-2bdfc9dc67)	9 Jul 201800:00	–	nessus
Tenable Nessus	Fedora 27 : php-symfony3 (2018-c8ddc44bbb)	9 Jul 201800:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2017-16652	27 Aug 202500:00	–	nessus

Vulners

Node

symfony securityRange3.3.0–3.3.13composer

symfony securityRange3.2.0–3.2.14composer

symfony securityRange2.8.0–2.8.31composer

symfony securityRange2.7.0–2.7.38composer

symfony security-httpRange3.3.0–3.3.13composer

symfony security-httpRange3.2.0–3.2.14composer

symfony security-httpRange2.8.0–2.8.31composer

symfony security-httpRange2.7.0–2.7.38composer

symfony symfonyRange3.3.0–3.3.13composer

symfony symfonyRange3.2.0–3.2.14composer

symfony symfonyRange2.8.0–2.8.31composer

symfony symfonyRange2.7.0–2.7.38composer

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2017-16652
lists	www.lists.debian.org/debian-lts-announce/2019/03/msg00009.html
symfony	www.symfony.com/blog/cve-2017-16652-open-redirect-vulnerability-on-security-handlers
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security-http/CVE-2017-16652.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security/CVE-2017-16652.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2017-16652.yaml
symfony	www.symfony.com/cve-2017-16652
github	www.github.com/advisories/GHSA-r7p7-qr7p-2rrf