CVE-2023-46734: Symfony potential Cross-site Scripting vulnerabilities in CodeExtension filters
First published: Fri Nov 10 2023(Updated: )
### Description Some Twig filters in CodeExtension use "is_safe=html" but don't actually ensure their input is safe. ### Resolution Symfony now escapes the output of the affected filters. The patch for this issue is available [here](https://github.com/symfony/symfony/commit/9da9a145ce57e4585031ad4bee37c497353eec7c) for branch 4.4. ### Credits We would like to thank Pierre Rudloff for reporting the issue and to Nicolas Grekas for providing the fix.
Credit: security-advisories@github.com security-advisories@github.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SensioLabs Symfony | >=2.0.0<4.4.51 | |
| SensioLabs Symfony | >=5.0.0<5.4.31 | |
| SensioLabs Symfony | >=6.0.0<6.3.8 | |
| Sensiolabs Twig | >=2.0.0<4.4.51 | |
| Sensiolabs Twig | >=5.0.0<5.4.31 | |
| Sensiolabs Twig | >=6.0.0<6.3.8 | |
| composer/symfony/symfony | >=6.0.0<6.3.8 | 6.3.8 |
| composer/symfony/symfony | >=5.0.0<5.4.31 | 5.4.31 |
| composer/symfony/symfony | >=2.0.0<4.4.51 | 4.4.51 |
| composer/symfony/twig-bridge | >=6.0.0<6.3.8 | 6.3.8 |
| composer/symfony/twig-bridge | >=5.0.0<5.4.31 | 5.4.31 |
| composer/symfony/twig-bridge | >=2.0.0<4.4.51 | 4.4.51 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/symfony/symfony/security/advisories/GHSA-q847-2q57-wmr3
- https://github.com/symfony/symfony/commit/5d095d5feb1322b16450284a04d6bb48d1198f54
- https://github.com/symfony/symfony/commit/9da9a145ce57e4585031ad4bee37c497353eec7c
- https://lists.debian.org/debian-lts-announce/2023/11/msg00019.html
- https://nvd.nist.gov/vuln/detail/CVE-2023-46734
- https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2023-46734.yaml
- https://symfony.com/cve-2023-46734
- https://github.com/advisories/GHSA-q847-2q57-wmr3 (Advisory)
Frequently Asked Questions
What is the severity of CVE-2023-46734?
The severity of CVE-2023-46734 is medium.
What is the description of CVE-2023-46734?
CVE-2023-46734 is a vulnerability in Symphony CodeExtension filters that allows potential cross-site scripting (XSS) attacks.
How can the potential cross-site scripting (XSS) vulnerabilities in Symphony CodeExtension filters be exploited?
The potential cross-site scripting (XSS) vulnerabilities in Symphony CodeExtension filters can be exploited by injecting malicious code into user input fields that are not properly sanitized.
What is the recommended remedy for CVE-2023-46734?
To remediate CVE-2023-46734, update Symphony to version 6.3.8 or later or version 5.4.31 or later.
Where can I find more information about CVE-2023-46734?
You can find more information about CVE-2023-46734 in the following references: [reference 1](https://github.com/symfony/symfony/security/advisories/GHSA-q847-2q57-wmr3), [reference 2](https://github.com/symfony/symfony/commit/5d095d5feb1322b16450284a04d6bb48d1198f54), [reference 3](https://github.com/symfony/symfony/commit/9da9a145ce57e4585031ad4bee37c497353eec7c).
- collector/nvd-api
- collector/github-advisory-latest
- alias/GHSA-q847-2q57-wmr3
- alias/CVE-2023-46734
- collector/nvd-cve
- collector/github-advisory
- agent/title
- agent/references
- agent/author
- agent/description
- agent/type
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/remedy
- agent/softwarecombine
- agent/tags
- agent/severity
- agent/weakness
- collector/mitre-cve
- source/MITRE
- vendor/sensiolabs
- canonical/sensiolabs symfony
- version/sensiolabs symfony/2.0.0
- version/sensiolabs symfony/5.0.0
- version/sensiolabs symfony/6.0.0
- canonical/sensiolabs twig
- version/sensiolabs twig/2.0.0
- version/sensiolabs twig/5.0.0
- version/sensiolabs twig/6.0.0
- package-manager/composer