[MEDIUM] CVE-2021-41267: Webcache Poisoning via X-Forwarded-Prefix and sub-request

PKSA-2dmf-r1fg-t642 CVE-2021-41267 GHSA-q3j3-w37x-hq2q

Affected package: symfony/symfony

Affected version: >=5.2.0,<5.3.0|>=5.3.0,<5.3.12

Reported by:
GitHub, FriendsOfPHP/security-advisories