CVE-2024-50342
2 advisories.
Packagist/symfony/http-client CVE-2024-50342: low 3.1, EPSS 0.47%
Symfony allows internal address and port enumeration by NoPrivateNetworkHttpClient
Action: Upgrade symfony/http-client to 5.4.47 or later.
composer require symfony/http-client:5.4.47composer require symfony/http-client:6.4.15composer require symfony/http-client:7.1.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.3.0 | 5.4.47 | - |
| 6.0.0 | 6.4.15 | - |
| 7.0.0 | 7.1.8 | - |
Fixed versions
| 5.4.47 | 6.4.15 | 7.1.8 |
Sources
- osv: GHSA-9c3x-r3wp-mgxm
- https://github.com/symfony/symfony/security/advisories/GHSA-9c3x-r3wp-mgxm
- https://nvd.nist.gov/vuln/detail/CVE-2024-50342
- https://github.com/symfony/symfony/commit/296d4b34a33b1a6ca5475c6040b3203622520f5b
- https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/http-client/CVE-2024-50342.yaml
- https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2024-50342.yaml
- https://github.com/symfony/symfony
- https://symfony.com/cve-2024-50342
CVE-2024-50342 · published · modified · JSON
Packagist/symfony/symfony CVE-2024-50342: low 3.1, EPSS 0.47%
Symfony allows internal address and port enumeration by NoPrivateNetworkHttpClient
Action: Upgrade symfony/symfony to 5.4.47 or later.
composer require symfony/symfony:5.4.47composer require symfony/symfony:6.4.15composer require symfony/symfony:7.1.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.3.0 | 5.4.47 | - |
| 6.0.0 | 6.4.15 | - |
| 7.0.0 | 7.1.8 | - |
Fixed versions
| 5.4.47 | 6.4.15 | 7.1.8 |
Sources
- osv: GHSA-9c3x-r3wp-mgxm#Packagist/symfony/symfony
- https://github.com/symfony/symfony/security/advisories/GHSA-9c3x-r3wp-mgxm
- https://nvd.nist.gov/vuln/detail/CVE-2024-50342
- https://github.com/symfony/symfony/commit/296d4b34a33b1a6ca5475c6040b3203622520f5b
- https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/http-client/CVE-2024-50342.yaml
- https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2024-50342.yaml
- https://github.com/symfony/symfony
- https://symfony.com/cve-2024-50342
CVE-2024-50342 · published · modified · JSON