SSD Advisory – Symfony Framework forward() Remote Code Execution

3 Comments / Vulnerability publication / By

Vulnerability Summary The following advisory describes a vulnerability found in Symfony 3.4 – a PHP framework that is used to create websites and web applications. Built on top of the Symfony Components. Under certain conditions, the Symfony framework can be abused to trigger RCE in the HttpKernel (http-kernel) component, while forward() is considered by the …

SSD Advisory – Symfony Framework forward() Remote Code Execution Read More »