Description
Symfony是SensioLabs公司开发的一款开源PHP Web应用框架，提供了一套完整的开发工具和组件，广泛应用于企业级Web应用开发。Symfony /_profiler/phpinfo 接口存在信息泄露漏洞，攻击者可获取服务器PHP配置信息。
Symfony /_profiler/phpinfo 信息泄露漏洞（CVE-2024-50340）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-50340
https://blog.nollium.com/cve-2024-50340-remote-access-to-symfony-profiler-via-injected-arguments-d2f14b4f6ad7
https://www.ionix.io/blog/cve-2024-50340-remote-access-to-symfony-profiler/
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-50340.yaml
https://symfony.com/blog/cve-2026-46626-symfonyruntime-cve-2024-50340-patch-bypass-via-parse-str-sapi-argv-mismatch
https://www.cve.org/CVERecord?id=CVE-2024-50340