Lucene search
OpenJS FoundationFRIENDSOFPHP:SYMFONY:HTTP-KERNEL:CVE-2022-24894HistoryFeb 01, 2023 - 8:00 a.m.
CVE-2022-24894: Prevent storing cookie headers in HttpCache
2023-02-0108:00:00
OpenJS Foundation
github.com
7
cve-2022-24894
symfony
httpcache
software
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
7.2
Confidence
Low
EPSS
0.002
Percentile
55.8%
More info at https://symfony.com/cve-2022-24894
Affected configurations
Node
symfonyhttp_kernelRange<6.2.6
Related
debiancve
debiancve
CVE-2022-24894
2023-02-03 22:15:10
osv
osv
BIT-symfony-2022-24894
2024-03-06 11:07:13
CVE-2022-24894
2023-02-03 22:15:10
Symfony storing cookie headers in HttpCache
2023-02-01 18:48:09
cve
cve
CVE-2022-24894
2023-02-03 22:15:10
veracode
veracode
Improper Authorization
2023-02-17 06:39:35
github
github
Symfony storing cookie headers in HttpCache
2023-02-01 18:48:09
ubuntucve
ubuntucve
CVE-2022-24894
2023-02-03 00:00:00
nvd
nvd
CVE-2022-24894
2023-02-03 22:15:10
prion
prion
Design/Logic Flaw
2023-02-03 22:15:00
cvelist
cvelist
CVE-2022-24894 Symfony storing cookie headers in HttpCache
2023-02-03 21:46:23
symfony
symfony
CVE-2022-24894: Prevent storing cookie headers in HttpCache
2023-02-01 00:00:00
friendsofphp
friendsofphp
CVE-2022-24894: Prevent storing cookie headers in HttpCache
2023-02-01 08:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: php-symfony4-4.4.50-1.fc37
2023-02-11 00:33:03
[SECURITY] Fedora 36 Update: php-symfony4-4.4.50-1.fc36
2023-02-11 01:33:25
openvas
openvas
Fedora: Security Advisory for php-symfony4 (FEDORA-2023-74b702f058)
2023-02-11 00:00:00
Fedora: Security Advisory for php-symfony4 (FEDORA-2023-aecde14648)
2023-02-11 00:00:00
Symfony Multiple Vulnerabilities (GHSA-h7vf-5wrv-9fhv, GHSA-3gv2-29qc-v67m)
2023-02-06 00:00:00
nessus
nessus
Fedora 36 : php-symfony4 (2023-aecde14648)
2023-02-11 00:00:00
Fedora 37 : php-symfony4 (2023-74b702f058)
2023-02-11 00:00:00
Debian DLA-3493-1 : symfony - LTS security update
2023-07-12 00:00:00
redos
redos
ROS-20240806-05
2024-08-06 00:00:00
debian
debian
[SECURITY] [DLA 3493-1] symfony security update
2023-07-11 23:19:27
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
7.2
Confidence
Low
EPSS
0.002
Percentile
55.8%
Related for FRIENDSOFPHP:SYMFONY:HTTP-KERNEL:CVE-2022-24894