CVE-2024-50343

Summary

CVE-2024-50343 affects the symfony/validator module in the Symphony PHP framework, which is used for input validation. Maliciously crafted input, ending with `\\n`, can trick the `Validator` into treating the input as complete instead of matching the entire input with regular expressions. This issue is present in Symfony versions 5.4.43, 6.4.11, and 7.1.4. To mitigate this vulnerability, users are advised to upgrade to versions that utilize the `D` regex modifier, such as those mentioned above. There are currently no known workarounds for this security flaw.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.