{"metadata": {"vulnerability": "cve-2021-41267", "count": 22, "kinds": {"milestone": 6, "sighting": 1, "kev": 0, "other": 15}}, "data": [{"timestamp": "2021-09-15T00:00:00Z", "date_only": false, "value": "2021-09-15T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2021-41267", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-11-24T00:00:00Z", "date_only": false, "value": "2021-11-24T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-902", "record": "CERTFR-2021-AVI-902", "field": "last_revision_date"}, {"timestamp": "2021-11-24T00:00:00Z", "date_only": true, "value": "2021-11-24", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2021-41267", "record": "GSD-2021-41267", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2021-11-24T00:00:00Z", "date_only": false, "value": "2021-11-24T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-902", "record": "CERTFR-2021-AVI-902", "field": "initial_release_date"}, {"timestamp": "2021-11-24T00:00:00Z", "date_only": false, "value": "2021-11-24T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-902", "record": "CERTFR-2021-AVI-902", "field": "revisions.0.revision_date"}, {"timestamp": "2021-11-24T18:55:17Z", "date_only": false, "value": "2021-11-24T18:55:17.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2021-41267", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-11-24T18:55:17Z", "date_only": false, "value": "2021-11-24T18:55:17.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2021-41267", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-11-24T19:15:00Z", "date_only": false, "value": "2021-11-24T19:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-Q3J3-W37X-HQ2Q", "record": "GHSA-Q3J3-W37X-HQ2Q", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-11-24T19:15:00Z", "date_only": false, "value": "2021-11-24T19:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2021-41267", "record": "UBUNTU-CVE-2021-41267", "field": "published"}, {"timestamp": "2021-11-24T19:15:00Z", "date_only": false, "value": "2021-11-24T19:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-41267", "record": "GSD-2021-41267", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-11-24T19:15:07.737Z", "date_only": false, "value": "2021-11-24T19:15:07.737", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-41267", "record": "FKIE_CVE-2021-41267", "field": "published"}, {"timestamp": "2021-11-24T20:04:25Z", "date_only": false, "value": "2021-11-24T20:04:25Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-Q3J3-W37X-HQ2Q", "record": "GHSA-Q3J3-W37X-HQ2Q", "field": "published"}, {"timestamp": "2021-11-24T22:27:40Z", "date_only": false, "value": "2021-11-24T22:27:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/32974", "record": "CVE-2021-41267", "field": "creation_timestamp", "uuid": "364c79f0-5722-4294-8c8d-6674c0caf266", "content": "\u203c CVE-2021-41267 \u203c\n\nSymfony/Http-Kernel is the HTTP kernel component for Symfony, a PHP framework for web and console applications and a set of reusable PHP components. Headers that are not part of the \"trusted_headers\" allowed list are ignored and protect users from \"Cache poisoning\" attacks. In Symfony 5.2, maintainers added support for the `X-Forwarded-Prefix` headers, but this header was accessible in SubRequest, even if it was not part of the \"trusted_headers\" allowed list. An attacker could leverage this opportunity to forge requests containing a `X-Forwarded-Prefix` header, leading to a web cache poisoning issue. Versions 5.3.12 and later have a patch to ensure that the `X-Forwarded-Prefix` header is not forwarded to subrequests when it is not trusted.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/32974"}, {"timestamp": "2021-11-30T00:00:00Z", "date_only": true, "value": "2021-11-30", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2021-41267", "record": "GSD-2021-41267", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2021-11-30T18:52:00Z", "date_only": false, "value": "2021-11-30T18:52Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-41267", "record": "GSD-2021-41267", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-13T01:23:27.107Z", "date_only": false, "value": "2023-12-13T01:23:27.107483Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-41267", "record": "GSD-2021-41267", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-02-05T11:13:47Z", "date_only": false, "value": "2024-02-05T11:13:47Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-Q3J3-W37X-HQ2Q", "record": "GHSA-Q3J3-W37X-HQ2Q", "field": "modified"}, {"timestamp": "2024-08-04T03:08:31.656Z", "date_only": false, "value": "2024-08-04T03:08:31.656Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2021-41267", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T03:08:31.656Z", "date_only": false, "value": "2024-08-04T03:08:31.656Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2021-41267", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-13T10:22:37Z", "date_only": false, "value": "2025-01-13T10:22:37Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2021-41267", "record": "UBUNTU-CVE-2021-41267", "field": "modified"}, {"timestamp": "2025-06-23T15:54:06Z", "date_only": false, "value": "2025-06-23T15:54:06Z", "kind": "other", "label": "Withdrawn", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2021-41267", "record": "UBUNTU-CVE-2021-41267", "field": "withdrawn"}, {"timestamp": "2026-06-17T04:08:12.260Z", "date_only": false, "value": "2026-06-17T04:08:12.260", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-41267", "record": "FKIE_CVE-2021-41267", "field": "lastModified"}]}