symfony/http-client
Composer · بسته
اطلاعرسانی آسیبپذیری
دنبالکردن| گزارش | محصول | اکوسیستم | شدت | وضعیت اصلاح | آخرین تغییر |
|---|---|---|---|---|---|
| Symfony: IpUtils::PRIVATE_SUBNETS Omits IPv6 Transition Forms (6to4, NAT64, Teredo, IPv4-compatible): SSRF Bypass in NoPrivateNetworkHttpClient | symfony/http-clientsymfony/http-foundation | Composer | متوسط | اصلاح گزارش شده | |
| Symfony allows internal address and port enumeration by NoPrivateNetworkHttpClient | symfony/http-clientsymfony/symfony | Composer | کم | اصلاح گزارش شده | |
| NoPrivateNetworkHttpClient Does Not Pin the Checked IP of Cached Hosts, Letting DNS Rebinding Enumerate Internal Ports: Incomplete Fix for CVE-2024-50342 | symfony/http-client | Composer | نامشخص | اصلاح اعلام نشده | |
| ScopingHttpClient Sends the Credentials of Its Default Scope to Other Origins Through Network-Path References | symfony/http-client | Composer | نامشخص | اصلاح اعلام نشده |