CVE-2024-50343

symfony/validator is a module for the Symphony PHP framework which provides tools to validate values. It is possible to trick a `Validator` configured with a regular expression using the `$` metacharacters, with an input ending with `\n`. Symfony as of versions 5.4.43, 6.4.11, and 7.1.4 now uses the `D` regex modifier to match the entire input. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS

No CVSS.

Configurations

No configuration.

History

06 Nov 2024, 21:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-11-06 21:15

Updated : 2024-11-08 19:01


NVD link : CVE-2024-50343

Mitre link : CVE-2024-50343


JSON object : View

Products Affected

No product.

CWE
CWE-20

Improper Input Validation