Input Validation Bypass

🗓️ 19 Nov 2024 11:40:31Reported by Veracode Vulnerability DatabaseType

symfony vulnerable to input validation bypass allowing attackers to bypass with specific inputs.

Reporter	Title	Published	Views	Family All 45
AstraLinux	Astra Linux - уязвимость в symfony	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the Symfony software platform for developing and managing web applications arises from the lack of measures taken to neutralize special elements, allowing attackers to execute arbitrary code.	14 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the http-client component of the Symfony software development and web application management platform allows attackers to access confidential data.	3 Jul 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the validator component in the Symfony software development and web application management platform allows a hacker to access confidential data.	3 Jul 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the http-foundation component of the Symfony software development and web application management platform allows attackers to access confidential data.	3 Jul 202500:00	–	bdu_fstec
Circl	CVE-2024-50343	6 Nov 202421:25	–	circl
CNNVD	Symfony 输入验证错误漏洞	6 Nov 202400:00	–	cnnvd
CVE	CVE-2024-50343	6 Nov 202421:00	–	cve
Cvelist	CVE-2024-50343 Incorrect response from Validator when input ends with `\n` in symfony/validator	6 Nov 202421:00	–	cvelist
Debian	[SECURITY] [DLA 4200-1] symfony security update	31 May 202519:35	–	debian

Vulners

Node

validator symfony/validatorRange2.0.x-dev–5.4.42php

validator symfony/validatorRangev6.0.0-BETA1–6.0.0-BETA1php

validator symfony/validatorRangev7.0.0-BETA1–7.0.0-BETA1php

symfony symfony/symfonyRangev6.0.0-BETA1–6.0.0-BETA1php

symfony symfony/symfonyRangev2.0.0BETA1–2.0.0BETA1php

symfony symfony/symfonyRangev7.0.0-BETA1–7.0.0-BETA1php

Source	Link
github	www.github.com/symfony/symfony/commit/7d1032bbead9a4229b32fa6ebca32681c80cb76f
symfony	www.symfony.com/blog/cve-2024-50343-incorrect-response-from-validator-when-input-ends-with-n
lists	www.lists.debian.org/debian-lts-announce/2025/05/msg00051.html
github	www.github.com/symfony/symfony/security/advisories/GHSA-g3rh-rrhp-jhh9
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2024-50343.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/validator/CVE-2024-50343.yaml

03 Nov 2025 22:22Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.13.1

EPSS0.00246

SSVC