Symfony-based websites open to RCE attack, research finds

guest · Oct 23, 2020

Symfony-based websites open to RCE attack, research finds
Researcher’s methods rely on misconfigured servers – but these are easy to find
October 23, 2020
https://portswigger.net/daily-swig/symfony-based-websites-open-to-rce-attack-research-finds

A feature in Symfony, a popular open source framework for building PHP applications, could expose websites to remote code execution (RCE) if configured improperly, a security researcher has found.

Attackers could exploit the feature, which allows browsers to download fragments of web pages, to run arbitrary commands on the Symfony server.
Click to expand...

Breaking the secret
Symfony servers support a /_fragment command that allows clients to provide custom PHP commands and return the HTML output. To prevent misuse, Symfony requires requesters to sign their messages with a cryptographic key stored on the server.

Ambionics’ Charles Fol, who detailed the attacks on Symfony servers in a blog post, found that attackers could use multiple methods to bypass the security check.
All of these methods rely on Symfony servers being misconfigured – an all too common problem, according to Fol
Click to expand...

Fol’s findings reiterate the need to exercise caution when using web development platforms.

“As general advice, I would say something really dull: read the documentation and installation guide carefully! Both Symfony and eZPublish mention the fact that the secret key is, well, secret,” he says. “Also, if you’re not sure, generate it again.”
Click to expand...

Log in or Sign up

Symfony-based websites open to RCE attack, research finds

guest Guest

Log in or Sign up

Symfony-based websites open to RCE attack, research finds

guest Guest

Useful Searches