ET WEB_SPECIFIC_APPS Symphony PHP Symfony Profiler Environment Manipulation (CVE-2024-50340)

SID: 2057414Rev: 110 views
Sourceet/open
CreatedNovember 13, 2024
UpdatedNovember 13, 2024
Classificationweb-application-attack
alert http any any -> $HOME_NET any (msg:"ET WEB_SPECIFIC_APPS Symphony PHP Symfony Profiler Environment Manipulation (CVE-2024-50340)"; flow:established,to_server; http.uri; content:"|3d|dev"; nocase; pcre:"/[\x3f\x26]\x2b\x2d{1,2}e(?:nv)?\x3ddev/i"; reference:url,github.com/Nyamort/CVE-2024-50340; reference:cve,2024-50340; classtype:web-application-attack; sid:2057414; rev:1; metadata:attack_target Server, tls_state TLSDecrypt, created_at 2024_11_13, cve CVE_2024_50340, deployment Perimeter, deployment Internal, deployment SSLDecrypt, confidence High, signature_severity Major, tag Exploit, updated_at 2024_11_13, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_technique_id T1190, mitre_technique_name Exploit_Public_Facing_Application; target:dest_ip;)

References

urlgithub.com/Nyamort/CVE-2024-50340
cve2024-50340

Metadata

attack targetServer
tls stateTLSDecrypt
created at2024_11_13
deploymentSSLDecrypt
confidenceHigh
signature severityMajor
tagExploit
updated at2024_11_13
mitre tactic idTA0001
mitre tactic nameInitial_Access
mitre technique idT1190
mitre technique nameExploit_Public_Facing_Application

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!