Beveiligingsadvies

CVE-2026-48747

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-14 19:16:24

Laatst bijgewerkt 2026-07-15 14:22:53

Toegewezen door GitHub_M

CVSS-score 6.3

Status PUBLISHED

Beschrijving

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 7.4.13 and 8.0.13, MailomatRequestParser::validateSignature() parsed X-MOM-Webhook-Signature as algo=signature and passed the request-selected algorithm to hash_hmac(), allowing a signature algorithm downgrade instead of enforcing Mailomat's documented SHA-256 webhook signature. This issue is fixed in versions 7.4.13 and 8.0.13.

← Alle CVE's bekijken Bekijk op cve.org ↗