CVE-2023-46734

Summary

CVE-2023-46734 is a vulnerability affecting the Symfony PHP framework and its components, specifically some Twig filters in CodeExtension. Prior to versions 4.4.51, 5.4.31, and 6.3.8, these filters used the `is_safe=html` mode but failed to ensure input safety. Consequently, an attacker could potentially inject malicious HTML code. With the release of versions 4.4.51, 5.4.31, and 6.3.8, Symfony now properly escapes the output of the affected filters, mitigating this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.