Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/06/15 5:33 p.m.13 views

Symfony: UrlGenerator Dot-Segment Encoding Skips Every Other Chained `../` or `./` → Generated URL Collapses Off-Route Under RFC 3986 Normalization

Description Symfony\Component\Routing\Generator\UrlGenerator::doGenerate percent-encodes . and .. path segments so that the generated URL still resolves to the originating route after RFC 3986 §5.2.4 dot-segment removal which strict RFC-3986 consumers — routers, reverse proxies, HTTP clients —...

6.1CVSS5.3AI score0.00267EPSS
SaveExploits0References6Affected Software2
Rows per page
Query Builder