CVE-2020-5255: Improper Input Validation

March 30, 2020 (updated April 9, 2020)

In Symfony, when a Response does not contain a Content-Type header, affected versions of Symfony can fallback to the format defined in the Accept header of the request, leading to a possible mismatch between the response content and Content-Type header. When the response is cached, this can prevent the use of the website by other users.

References

nvd.nist.gov/vuln/detail/CVE-2020-5255

Code Behaviors & Features

Detect and mitigate CVE-2020-5255 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →