CVE-2024-50340— Ability to change environment from query in symfony/runtime
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-50340
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Ability to change environment from query in symfony/runtime
Source: NVD (National Vulnerability Database)
Vulnerability Description
symfony/runtime is a module for the Symphony PHP framework which enables decoupling PHP applications from global state. When the `register_argv_argc` php directive is set to `on` , and users call any URL with a special crafted query string, they are able to change the environment or debug mode used by the kernel when handling the request. As of versions 5.4.46, 6.4.14, and 7.1.7 the `SymfonyRuntime` now ignores the `argv` values for non-SAPI PHP runtimes. All users are advised to upgrade. There are no known workarounds for this vulnerability.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Source: NVD (National Vulnerability Database)
Vulnerability Type
输出中的特殊元素转义处理不恰当(注入)
Source: NVD (National Vulnerability Database)
Vulnerability Title
Symfony 注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Symfony是Symfony公司的一个用于 Web 和控制台应用程序的 PHP 框架以及一组可重用的 PHP 组件。 Symfony存在注入漏洞，该漏洞源于允许将PHP应用程序与全局状态分离。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Shenlong Deep Dive — AI Deep Analysis
10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.
Affected Products
II. Public POCs for CVE-2024-50340
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | None | https://github.com/Nyamort/CVE-2024-50340 | POC Details |
| 2 | symfony/runtime is a module for the Symphony PHP framework which enables decoupling PHP applications from global state. When the `register_argv_argc` php directive is set to `on` , and users call any URL with a special crafted query string, they are able to change the environment or debug mode used by the kernel when handling the request. As of versions 5.4.46, 6.4.14, and 7.1.7 the `SymfonyRuntime` now ignores the `argv` values for non-SAPI PHP runtimes. | https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-50340.yaml | POC Details |
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-50340
请登录查看更多情报信息。
Same Patch Batch · symfony · 2024-11-06 · 6 CVEs total
| CVE-2024-50342 | 3.1 LOW | Internal address and port enumeration allowed by NoPrivateNetworkHttpClient in symfony/htt |
| CVE-2024-50341 | 3.1 LOW | Security::login does not take into account custom user_checker in symfony/security-bundle |
| CVE-2024-50345 | 3.1 LOW | Open redirect via browser-sanitized URLs in symfony/http-foundation |
| CVE-2024-50343 | 3.1 LOW | Incorrect response from Validator when input ends with `\n` in symfony/validator |
| CVE-2024-51736 | Command execution hijack on Windows with Process class in symfony/process |
IV. Related Vulnerabilities
Same product: symfony
- CVE-2026-24739
Symfony has incorrect argument escaping under MSYS2/Git Bash - CVE-2025-64500
Symfony's incorrect parsing of PATH_INFO can lead to limited - CVE-2024-51996
Symphony has an Authentication Bypass via RememberMe - CVE-2024-50341
Security::login does not take into account custom user_check - CVE-2024-50342
Internal address and port enumeration allowed by NoPrivateNe
Same vendor: symfony
- CVE-2026-24739
Symfony has incorrect argument escaping under MSYS2/Git Bash - CVE-2025-64500
Symfony's incorrect parsing of PATH_INFO can lead to limited - CVE-2025-47946
symfony/ux-live-component and symfony/ux-twig-component vuln - CVE-2024-51996
Symphony has an Authentication Bypass via RememberMe - CVE-2024-50341
Security::login does not take into account custom user_check
Same weakness: CWE-74
- CVE-2025-67486
Dolibarr has an Authenticated Remote Code Execution via eval - CVE-2026-26164
M365 Copilot Information Disclosure Vulnerability - CVE-2026-7045
baomidou dynamic-datasource StandardEvaluationContext/SpelEx - CVE-2026-6994
Envoy Query Parameter header_mutation.cc params.add injectio - CVE-2026-41319
MailKit has STARTTLS Response Injection via unflushed stream
V. Comments for CVE-2024-50340
No comments yet