Lucene search
GoogleOSV:CVE-2018-14774HistoryAug 03, 2018 - 5:29 p.m.
CVE-2018-14774
2018-08-0317:29:00
Google
osv.dev
5
An issue was discovered in HttpKernel in Symfony 2.7.0 through 2.7.48, 2.8.0 through 2.8.43, 3.3.0 through 3.3.17, 3.4.0 through 3.4.13, 4.0.0 through 4.0.13, and 4.1.0 through 4.1.2. When using HttpCache, the values of the X-Forwarded-Host headers are implicitly set as trusted while this should be forbidden, leading to potential host header injection.
Related
cvelist
cvelist
CVE-2018-14774
2018-08-03 17:00:00
veracode
veracode
Header Injection
2018-08-06 06:19:03
ubuntucve
ubuntucve
CVE-2018-14774
2018-08-03 00:00:00
nvd
nvd
CVE-2018-14774
2018-08-03 17:29:00
prion
prion
Design/Logic Flaw
2018-08-03 17:29:00
osv
osv
Symfony Host Header Injection
2022-05-14 02:20:59
symfony
symfony
CVE-2018-14774: Possible host header injection when using HttpCache
2018-08-01 00:00:00
cve
cve
CVE-2018-14774
2018-08-03 17:29:00
debiancve
debiancve
CVE-2018-14774
2018-08-03 17:29:00
github
github
Symfony Host Header Injection
2022-05-14 02:20:59
fedora
fedora
[SECURITY] Fedora 28 Update: php-symfony3-3.4.14-1.fc28
2018-08-14 21:13:01
[SECURITY] Fedora 27 Update: php-symfony4-4.0.14-1.fc27
2018-08-14 20:21:51
[SECURITY] Fedora 27 Update: php-symfony-2.8.44-1.fc27
2018-08-14 20:21:42
openvas
openvas
Fedora Update for php-symfony FEDORA-2019-3ee6a7adf2
2019-04-29 00:00:00
Fedora Update for php-zendframework-zend-diactoros FEDORA-2018-4a606489ae
2018-08-15 00:00:00
Fedora Update for php-symfony FEDORA-2018-4deae442f2
2018-08-15 00:00:00
nessus
nessus
Fedora 27 : php-symfony4 (2018-7f43cbdb69)
2018-08-15 00:00:00
Fedora 27 : php-symfony (2018-4deae442f2)
2018-08-15 00:00:00
Fedora 27 : php-symfony3 (2018-6f3ceeb7cb)
2018-08-15 00:00:00