Improper Authorization

🗓️ 17 Feb 2023 06:39:35Reported by Veracode Vulnerability DatabaseType

Improper Authorization vulnerability in Symfony HTTP cache syste

Reporter	Title	Published	Views	Family All 79
AstraLinux	Astra Linux - уязвимость в symfony	20 May 202605:53	–	astralinux
CNNVD	Sensio Labs Symfony 授权问题漏洞	3 Feb 202300:00	–	cnnvd
CVE	CVE-2022-24894	3 Feb 202321:46	–	cve
Cvelist	CVE-2022-24894 Symfony storing cookie headers in HttpCache	3 Feb 202321:46	–	cvelist
Debian	[SECURITY] [DLA 3493-1] symfony security update	11 Jul 202323:19	–	debian
Debian CVE	CVE-2022-24894	3 Feb 202321:46	–	debiancve
Tenable Nessus	Debian dla-3493 : php-symfony - security update	12 Jul 202300:00	–	nessus
Tenable Nessus	Fedora 37 : php-symfony4 (2023-74b702f058)	11 Feb 202300:00	–	nessus
Tenable Nessus	Fedora 36 : php-symfony4 (2023-aecde14648)	11 Feb 202300:00	–	nessus
Tenable Nessus	Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS : Symfony vulnerabilities (USN-7272-1)	18 Feb 202500:00	–	nessus

Vulners

Node

http-kernel symfony/http-kernelRangev5.0.0-BETA1–5.0.0-BETA1php

http-kernel symfony/http-kernelRangev6.0.0-BETA1–6.0.0-BETA1php

http-kernel symfony/http-kernelRangev6.1.0-BETA1–6.1.0-BETA1php

http-kernel symfony/http-kernelRangev6.2.0-BETA1–6.2.0-BETA1php

sensiolabs symfony/symfonyRangev2.0.0BETA1–2.0.0BETA1php

sensiolabs symfony/symfonyRangev5.0.0-BETA1–5.0.0-BETA1php

sensiolabs symfony/symfonyRangev6.0.0-BETA1–6.0.0-BETA1php

sensiolabs symfony/symfonyRangev6.1.0-BETA1–6.1.0-BETA1php

sensiolabs symfony/symfonyRangev6.2.0-BETA1–6.2.0-BETA1php

Source	Link
github	www.github.com/symfony/symfony/commit/d2f6322af9444ac5cd1ef3ac6f280dbef7f9d1fb
symfony	www.symfony.com/blog/cve-2022-24894-prevent-storing-cookie-headers-in-httpcache
github	www.github.com/advisories/GHSA-h7vf-5wrv-9fhv
github	www.github.com/symfony/http-kernel/commit/f7822a7c63681e6ad4cadb8f8c2943c9bc2d3e9a
github	www.github.com/symfony/symfony/security/advisories/GHSA-h7vf-5wrv-9fhv
lists	www.lists.debian.org/debian-lts-announce/2023/07/msg00014.html
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2022-24894.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/http-kernel/CVE-2022-24894.yaml

10 Apr 2025 22:53Current

8.2High risk

Vulners AI Score8.2

CVSS 3.15.9 - 8.8

EPSS0.00182

SSVC