CVE-2026-45074

medium
Published 2026-05-20 · Modified 2026-05-27
CVSS v3
CVSS v2
VIR risk
5.5

Description

Symfony's Cas2Handler Derives CAS service URL from Client Host Header → Cross-Service Ticket Replay

Predictions

Exploit likelihood
20%
Patch ETA

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2026-45074

OS impact

OSVersionStatusFixed in
debian debianbookwormfixed0
debian debianbullseyefixed0
debian debianforkyfixed7.4.12+dfsg-1
debian debiansidfixed7.4.12+dfsg-1
debian debiantrixiefixed0

Package impact

EcosystemPackageVulnerableFixed
php Packagistsymfony/symfony>=7.1.0,<7.2.0|>=7.2.0,<7.3.0|>=7.3.0,<7.4.0|>=7.4.0,<7.4.12|>=8.0.0,<8.0.12
php Packagistsymfony/security-http>=7.1.0,<7.2.0|>=7.2.0,<7.3.0|>=7.3.0,<7.4.0|>=7.4.0,<7.4.12|>=8.0.0,<8.0.12
php COMPOSERsymfony/symfony>= 8.0.0, < 8.0.128.0.12
php COMPOSERsymfony/symfony>= 7.1.0, < 7.4.127.4.12
php COMPOSERsymfony/security-http>= 8.0.0, < 8.0.128.0.12
php COMPOSERsymfony/security-http>= 7.1.0, < 7.4.127.4.12
php Packagistsymfony/security-http>=7.1.0,<7.4.127.4.12
php Packagistsymfony/security-http>=8.0.0,<8.0.128.0.12
php Packagistsymfony/symfony>=7.1.0,<7.4.127.4.12
php Packagistsymfony/symfony>=8.0.0,<8.0.128.0.12

References

Verify integrity in audit chain (admin only). AS-IS.