CVE-2014-6061 — Improper Input Validation in Http-foundation

CWE-20 — Improper Input Validation2 documents2 sources
Severity
—MEDIUM
No vector
EPSS
No EPSS data
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Symfony Http-foundationSymfony
Timeline
PublishedMay 30

Description

Symfony has a security issue when parsing the Authorization header All 2.0.X, 2.1.X, 2.2.X, 2.3.X, 2.4.X, and 2.5.X versions of the Symfony HttpFoundation component are affected by this security issue. This issue has been fixed in Symfony 2.3.19, 2.4.9, and 2.5.4. Note that no fixes are provided for Symfony 2.0, 2.1, and 2.2 as they are not maintained anymore. ### Description When an application uses an HTTP basic or digest authentication, Symfony does not parse the `Authorization` header pro…

Affected Packages2 packages

▶Packagistsymfony/http-foundation2.0.0 — 2.3.19+2
▶Packagistsymfony/symfony2.0.0 — 2.3.19+2

🔴Vulnerability Details

2
GHSA
Symfony has a security issue when parsing the Authorization header↗2024-05-30
▶
OSV
Symfony has a security issue when parsing the Authorization header↗2024-05-30
▶
CVE-2014-6061 — Improper Input Validation | cvebase