Search for packages
| purl | pkg:composer/symfony/security-bundle@3.4.3 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-3gv2-29qc-v67m
Aliases: CVE-2022-24895 GMS-2023-210 |
Symfony vulnerable to Session Fixation of CSRF tokens Description ----------- When authenticating users Symfony by default regenerates the session ID … |
Not vulnerable |
|
CVE-2018-11408
|
URL Redirection to Untrusted Site (Open Redirect) The security handlers in the Security component in Symfony have an Open redirect … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2018-11406
|
Cross-Site Request Forgery (CSRF) By default, a user's session is invalidated when the user is logged out. This behavior can … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-g4g7-q726-v5hg
Aliases: CVE-2018-11406 |
Symfony CSRF Token Fixation An issue was discovered in the Security component in Symfony 2.7.x before 2.7.48, 2.8.x before 2.8.41, … |
Vulnerable Vulnerable |
|
GHSA-7hwc-2cq4-6x2w
Aliases: CVE-2018-11408 |
Symfony Open Redirect The security handlers in the Security component in Symfony in 2.7.x before 2.7.48, 2.8.x before 2.8.41, 3.3.x … |
Vulnerable Vulnerable |