CVE-2018-11408

2018-06-1316:29:01

Google

osv.dev

0.005 Low

EPSS

Percentile

76.4%

JSON

The security handlers in the Security component in Symfony in 2.7.x before 2.7.48, 2.8.x before 2.8.41, 3.3.x before 3.3.17, 3.4.x before 3.4.11, and 4.0.x before 4.0.11 have an Open redirect vulnerability when security.http_utils is inlined by a container. NOTE: this issue exists because of an incomplete fix for CVE-2017-16652.

CPENameOperatorVersion
security-httpeq2.7.10
security-httpeq2.7.47
security-httpeq2.7.11
security-httpeq2.7.35
security-httpeq2.7.28
security-httpeq2.7.29
security-httpeq2.3.33
security-httpeq2.3.34
security-httpeq2.7.0
security-httpeq2.7.17

Name	Operator	Version
security-http	eq	2.7.10
security-http	eq	2.7.47
security-http	eq	2.7.11
security-http	eq	2.7.35
security-http	eq	2.7.28
security-http	eq	2.7.29
security-http	eq	2.3.33
security-http	eq	2.3.34
security-http	eq	2.7.0
security-http	eq	2.7.17