Vulnerability Details CVE-2020-5255
In Symfony before versions 4.4.7 and 5.0.7, when a `Response` does not contain a `Content-Type` header, affected versions of Symfony can fallback to the format defined in the `Accept` header of the request, leading to a possible mismatch between the response's content and `Content-Type` header. When the response is cached, this can prevent the use of the website by other users. This has been patched in versions 4.4.7 and 5.0.7.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 58.3%
CVSS Severity
CVSS v3 Score 2.6
CVSS v2 Score 4.0
References
- https://github.com/symfony/symfony/commit/dca343442e6a954f96a2609e7b4e9c21ed6d74e6
- https://github.com/symfony/symfony/security/advisories/GHSA-mcx4-f5f5-4859
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C36JLPHUPKDFAX6D5WYFC4ALO2K7RDUQ/
- https://symfony.com/blog/cve-2020-5255-prevent-cache-poisoning-via-a-response-content-type-header
- https://github.com/symfony/symfony/commit/dca343442e6a954f96a2609e7b4e9c21ed6d74e6
- https://github.com/symfony/symfony/security/advisories/GHSA-mcx4-f5f5-4859
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C36JLPHUPKDFAX6D5WYFC4ALO2K7RDUQ/
- https://symfony.com/blog/cve-2020-5255-prevent-cache-poisoning-via-a-response-content-type-header
Products affected by CVE-2020-5255
-
cpe:2.3:a:sensiolabs:symfony:4.4.0
-
cpe:2.3:a:sensiolabs:symfony:4.4.1
-
cpe:2.3:a:sensiolabs:symfony:4.4.2
-
cpe:2.3:a:sensiolabs:symfony:4.4.3
-
cpe:2.3:a:sensiolabs:symfony:4.4.4
-
cpe:2.3:a:sensiolabs:symfony:4.4.5
-
cpe:2.3:a:sensiolabs:symfony:4.4.6
-
cpe:2.3:a:sensiolabs:symfony:5.0.0
-
cpe:2.3:a:sensiolabs:symfony:5.0.1
-
cpe:2.3:a:sensiolabs:symfony:5.0.2
-
cpe:2.3:a:sensiolabs:symfony:5.0.3
-
cpe:2.3:a:sensiolabs:symfony:5.0.4
-
cpe:2.3:a:sensiolabs:symfony:5.0.5
-
cpe:2.3:a:sensiolabs:symfony:5.0.6