CVE-2024-28861
published 2024-03-22CVE-2024-28861: Symfony 1 is a community-driven fork of the 1.x branch of Symfony, a PHP framework for web projects. Starting in version 1.1.0 and prior to version 1.5.19…
PriorityP261critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
1.53%
71.7th percentile
Symfony 1 is a community-driven fork of the 1.x branch of Symfony, a PHP framework for web projects. Starting in version 1.1.0 and prior to version 1.5.19, Symfony 1 has a gadget chain due to dangerous deserialization in `sfNamespacedParameterHolder` class that would enable an attacker to get remote code execution if a developer deserializes user input in their project. Version 1.5.19 contains a patch for the issue.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| friendsofsymfony1 | symfony1 | — | — |
| friendsofsymfony1 | symfony1 | >= 1.1.0 < 1.5.9 | 1.5.9 |
| friendsofsymfony1 | symfony1 | >= 1.1.0 < 1.5.19 | 1.5.19 |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
vendor_oracle7.4HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Gadget chain in Symfony 1 due to uncontrolled unserialized input in sfNamespacedParameterHolder
osv·2024-03-22
CVE-2024-28861 [MEDIUM] Gadget chain in Symfony 1 due to uncontrolled unserialized input in sfNamespacedParameterHolder
Gadget chain in Symfony 1 due to uncontrolled unserialized input in sfNamespacedParameterHolder
### Summary
Symfony 1 has a gadget chain due to dangerous unserialize in `sfNamespacedParameterHolder` class that would enable an attacker to get remote code execution if a developer unserialize user input in his project.
### Details
This vulnerability present no direct threat but is a vector that will enable remote code execution if a developper deserialize user untrusted data. For example:
```php
public function executeIndex(sfWebRequest $request)
{
$a = unserialize($request->getParameter('user'));
}
```
We will make the assumption this is the case in the rest of this explanation.
Symfony 1 provides the class `sfNamespacedParameterHolder` which implements `Serializable` interface. In parti
GHSA
Gadget chain in Symfony 1 due to uncontrolled unserialized input in sfNamespacedParameterHolder
ghsa·2024-03-22
CVE-2024-28861 [MEDIUM] CWE-502 Gadget chain in Symfony 1 due to uncontrolled unserialized input in sfNamespacedParameterHolder
Gadget chain in Symfony 1 due to uncontrolled unserialized input in sfNamespacedParameterHolder
### Summary
Symfony 1 has a gadget chain due to dangerous unserialize in `sfNamespacedParameterHolder` class that would enable an attacker to get remote code execution if a developer unserialize user input in his project.
### Details
This vulnerability present no direct threat but is a vector that will enable remote code execution if a developper deserialize user untrusted data. For example:
```php
public function executeIndex(sfWebRequest $request)
{
$a = unserialize($request->getParameter('user'));
}
```
We will make the assumption this is the case in the rest of this explanation.
Symfony 1 provides the class `sfNamespacedParameterHolder` which implements `Serializable` interface. In parti
Oracle
Oracle Oracle Analytics Risk Matrix: Data Visualization (Python) — CVE-2021-28861
vendor_oracle·2024-04-15·CVSS 7.4
CVE-2021-28861 [HIGH] Oracle Oracle Analytics Risk Matrix: Data Visualization (Python) — CVE-2021-28861
Oracle Oracle Analytics Risk Matrix: Data Visualization (Python) vulnerability
CVE: CVE-2021-28861
CVSS: 7.4
Protocol: HTTP
Remote exploit: Yes
Affected versions: Network
Advisory: cpuapr2024 (APR 2024)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/FriendsOfSymfony1/symfony1/commit/0bd9d59c69221f49bfc8be8b871b79e12d7d171ahttps://github.com/FriendsOfSymfony1/symfony1/security/advisories/GHSA-pv9j-c53q-h433https://github.com/FriendsOfSymfony1/symfony1/commit/0bd9d59c69221f49bfc8be8b871b79e12d7d171ahttps://github.com/FriendsOfSymfony1/symfony1/security/advisories/GHSA-pv9j-c53q-h433
2024-03-22
Published