All vulnerabilities

Servers and applications

CVE-2021-41267

Webcache Poisoning via X-Forwarded-Prefix and sub-request

Severity
Medium
Published
24 Nov 2021
Last changed
24 Nov 2021
Added to UpHeron
3 Nov 2026
Fixed in
5.3.12
Also known as
GHSA-q3j3-w37x-hq2q
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
SymfonyServers and applications · github:symfony/symfony
  • From 5.2.0 before 5.3.12

References