CVEvulnerability
CVE-2017-16652
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-06-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.1 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-601
Description
An issue was discovered in Symfony 2.7.x before 2.7.38, 2.8.x before 2.8.31, 3.2.x before 3.2.14, and 3.3.x before 3.3.13. DefaultAuthenticationSuccessHandler or DefaultAuthenticationFailureHandler takes the content of the _target_path parameter and generates a redirect response, but no check is performed on the path, which could be an absolute URL to an external domain. This Open redirect vulnerability can be exploited for example to mount effective phishing attacks.
Affected configurations
• sensiolabs symfony (> 2.7.0 < 2.7.38)
• sensiolabs symfony (> 2.8.0 < 2.8.31)
• sensiolabs symfony (> 3.2.0 < 3.2.14)
• sensiolabs symfony (>= 3.3.0 < 3.3.13)
• debian debian linux 8.0
Related
Weakness · CWE (1)
- CWE-601 URL Redirection to Untrusted Site weakness
References
- https://lists.debian.org/debian-lts-announce/2019/03/msg00009.html Third Party Advisory
- https://symfony.com/blog/cve-2017-16652-open-redirect-vulnerability-on-security-handlers Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2019/03/msg00009.html Third Party Advisory
- https://symfony.com/blog/cve-2017-16652-open-redirect-vulnerability-on-security-handlers Vendor Advisory