symfony/validator is a module for the Symphony PHP framework which provides tools to validate values. It is possible to trick a `Validator` configured with a regular expression using the `$` metacharacters, with an input ending with `\n`. Symfony as of versions 5.4.43, 6.4.11, and 7.1.4 now uses the `D` regex modifier to match the entire input. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS
No CVSS.
References
Configurations
No configuration.
History
06 Nov 2024, 21:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-11-06 21:15
Updated : 2024-11-08 19:01
NVD link : CVE-2024-50343
Mitre link : CVE-2024-50343
JSON object : View
Products Affected
No product.
CWE
CWE-20
Improper Input Validation