All vulnerabilities

Servers and applications

CVE-2024-50342

Internal address and port enumeration allowed by NoPrivateNetworkHttpClient

Severity
Low 3.1
Published
6 Nov 2024
Last changed
13 Nov 2024
Added to UpHeron
3 Nov 2026
Fixed in
5.4.47, 6.4.15, 7.1.8
Also known as
GHSA-9c3x-r3wp-mgxm
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
SymfonyServers and applications · github:symfony/symfony
  • Every version before 5.4.47
  • From 6 before 6.4.15
  • From 7 before 7.1.8

References