cnvd - cnvd-2020-41584

CNVD-2020-41584

Vulnerability from cnvd - Published: 2020-07-22

Title

Sensio Labs Symfony代码执行漏洞

Description

Sensio Labs Symfony是法国Sensio Labs公司的一套免费的、基于MVC架构的PHP开发框架。该框架提供常用的功能组件及工具，可用于快速创建复杂的WEB程序。 Sensio Labs Symfony 4.2.12之前的版本和4.3.8之前的4.3.x版本中存在代码执行漏洞，该漏洞源于VarExport组件未能正确转义字符串，攻击者可通过特制字符串利用该漏洞执行任意PHP代码。

Severity

高

Patch Name

Sensio Labs Symfony代码执行漏洞的补丁

Patch Description

Formal description

厂商已发布了漏洞修复程序，请及时关注更新： https://github.com/symfony/var-exporter/compare/d8bf442...57e00f3

Reference

https://nvd.nist.gov/vuln/detail/CVE-2019-11325

Impacted products

Name
['Sensio Labs Symfony <4.2.12', 'Sensio Labs Symfony 4.3.*，<4.3.8']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2019-11325",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2019-11325"
    }
  },
  "description": "Sensio Labs Symfony\u662f\u6cd5\u56fdSensio Labs\u516c\u53f8\u7684\u4e00\u5957\u514d\u8d39\u7684\u3001\u57fa\u4e8eMVC\u67b6\u6784\u7684PHP\u5f00\u53d1\u6846\u67b6\u3002\u8be5\u6846\u67b6\u63d0\u4f9b\u5e38\u7528\u7684\u529f\u80fd\u7ec4\u4ef6\u53ca\u5de5\u5177\uff0c\u53ef\u7528\u4e8e\u5feb\u901f\u521b\u5efa\u590d\u6742\u7684WEB\u7a0b\u5e8f\u3002\n\nSensio Labs Symfony 4.2.12\u4e4b\u524d\u7684\u7248\u672c\u548c4.3.8\u4e4b\u524d\u76844.3.x\u7248\u672c\u4e2d\u5b58\u5728\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8eVarExport\u7ec4\u4ef6\u672a\u80fd\u6b63\u786e\u8f6c\u4e49\u5b57\u7b26\u4e32\uff0c\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u7279\u5236\u5b57\u7b26\u4e32\u5229\u7528\u8be5\u6f0f\u6d1e\u6267\u884c\u4efb\u610fPHP\u4ee3\u7801\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://github.com/symfony/var-exporter/compare/d8bf442...57e00f3",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2020-41584",
  "openTime": "2020-07-22",
  "patchDescription": "Sensio Labs Symfony\u662f\u6cd5\u56fdSensio Labs\u516c\u53f8\u7684\u4e00\u5957\u514d\u8d39\u7684\u3001\u57fa\u4e8eMVC\u67b6\u6784\u7684PHP\u5f00\u53d1\u6846\u67b6\u3002\u8be5\u6846\u67b6\u63d0\u4f9b\u5e38\u7528\u7684\u529f\u80fd\u7ec4\u4ef6\u53ca\u5de5\u5177\uff0c\u53ef\u7528\u4e8e\u5feb\u901f\u521b\u5efa\u590d\u6742\u7684WEB\u7a0b\u5e8f\u3002\r\n\r\nSensio Labs Symfony 4.2.12\u4e4b\u524d\u7684\u7248\u672c\u548c4.3.8\u4e4b\u524d\u76844.3.x\u7248\u672c\u4e2d\u5b58\u5728\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8eVarExport\u7ec4\u4ef6\u672a\u80fd\u6b63\u786e\u8f6c\u4e49\u5b57\u7b26\u4e32\uff0c\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u7279\u5236\u5b57\u7b26\u4e32\u5229\u7528\u8be5\u6f0f\u6d1e\u6267\u884c\u4efb\u610fPHP\u4ee3\u7801\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Sensio Labs Symfony\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Sensio Labs Symfony \u003c4.2.12",
      "Sensio Labs Symfony 4.3.*\uff0c\u003c4.3.8"
    ]
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2019-11325",
  "serverity": "\u9ad8",
  "submitTime": "2019-11-22",
  "title": "Sensio Labs Symfony\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e"
}

CVE-2019-11325 (GCVE-0-2019-11325)

Vulnerability from cvelistv5 – Published: 2019-11-21 22:15 – Updated: 2024-08-04 22:48

Summary

An issue was discovered in Symfony before 4.2.12 and 4.3.x before 4.3.8. The VarExport component incorrectly escapes strings, allowing some specially crafted ones to escalate to execution of arbitrary PHP code. This is related to symfony/var-exporter.

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	https://github.com/symfony/var-exporter/compare/d…	x_refsource_MISC
	https://symfony.com/blog/symfony-4-3-8-released	x_refsource_CONFIRM
	https://github.com/symfony/symfony/releases/tag/v4.3.8	x_refsource_CONFIRM
	https://symfony.com/blog/cve-2019-11325-fix-escap…	x_refsource_CONFIRM

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:48:09.218Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/symfony/var-exporter/compare/d8bf442...57e00f3"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://symfony.com/blog/symfony-4-3-8-released"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/symfony/symfony/releases/tag/v4.3.8"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://symfony.com/blog/cve-2019-11325-fix-escaping-of-strings-in-varexporter"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2019-11-13T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in Symfony before 4.2.12 and 4.3.x before 4.3.8. The VarExport component incorrectly escapes strings, allowing some specially crafted ones to escalate to execution of arbitrary PHP code. This is related to symfony/var-exporter."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-11-21T22:15:55",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/symfony/var-exporter/compare/d8bf442...57e00f3"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://symfony.com/blog/symfony-4-3-8-released"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/symfony/symfony/releases/tag/v4.3.8"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://symfony.com/blog/cve-2019-11325-fix-escaping-of-strings-in-varexporter"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-11325",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue was discovered in Symfony before 4.2.12 and 4.3.x before 4.3.8. The VarExport component incorrectly escapes strings, allowing some specially crafted ones to escalate to execution of arbitrary PHP code. This is related to symfony/var-exporter."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/symfony/var-exporter/compare/d8bf442...57e00f3",
              "refsource": "MISC",
              "url": "https://github.com/symfony/var-exporter/compare/d8bf442...57e00f3"
            },
            {
              "name": "https://symfony.com/blog/symfony-4-3-8-released",
              "refsource": "CONFIRM",
              "url": "https://symfony.com/blog/symfony-4-3-8-released"
            },
            {
              "name": "https://github.com/symfony/symfony/releases/tag/v4.3.8",
              "refsource": "CONFIRM",
              "url": "https://github.com/symfony/symfony/releases/tag/v4.3.8"
            },
            {
              "name": "https://symfony.com/blog/cve-2019-11325-fix-escaping-of-strings-in-varexporter",
              "refsource": "CONFIRM",
              "url": "https://symfony.com/blog/cve-2019-11325-fix-escaping-of-strings-in-varexporter"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-11325",
    "datePublished": "2019-11-21T22:15:55",
    "dateReserved": "2019-04-18T00:00:00",
    "dateUpdated": "2024-08-04T22:48:09.218Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2020-41584

CVE-2019-11325 (GCVE-0-2019-11325)

Tags

Sightings

Nomenclature