Looking for the vulnerability index of Invicti's legacy products?
Symfony weak application secret - Vulnerability Database

Symfony weak application secret

Description

Your Symfony web application is using a weak/predictable application secret (APP_SECRET).

An attacker can use this secret to potentially execute arbitrary PHP code using the ESI (Edge-Side Includes) functionality that is accessible at /_fragment.

Remediation

It's recommended to change the Symfony's application secret (<strong>APP_SECRET</strong>) to a long random string.

Related Vulnerabilities