Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/symfony/security-core@3.0.6
purl pkg:composer/symfony/security-core@3.0.6
Next non-vulnerable version 3.4.48
Latest non-vulnerable version 5.2.8
Risk score 4.4
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-5pv8-ppvj-4h68
Aliases:
CVE-2021-21424
Prevent user enumeration using Guard or the new Authenticator-based Security Description ----------- The ability to enumerate users was possible without …
3.4.48
Not vulnerable
CVE-2018-11407

Improper Authentication An issue was discovered in the Ldap component in Symfony. It allows remote attackers to bypass authentication by …
2.8.37
Vulnerable
3.4.7
Vulnerable
4.0.7
Vulnerable
GHSA-35c5-28pg-2qg4
Aliases:
CVE-2018-11407
Symfony Authentication Bypass An issue was discovered in the LDAP component in Symfony 2.8.x before 2.8.37, 3.3.x before 3.3.17, 3.4.x …
3.3.17
Vulnerable
3.3.17
Vulnerable
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
CVE-2016-2403
Unauthorized access on a misconfigured LDAP server There's a flaw in `LdapBindAuthenticationProvider` that allows for an unauthorized access on a …
GHSA-wvj5-r78r-hhfq
Symfony Authentication Bypass Symfony before 2.8.6 and 3.x before 3.0.6 allows remote attackers to bypass authentication by logging in with … CVE-2016-2403