VulnerableCode Package Details - pkg:composer/symfony/security-http@3.2.0-alpha0

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:composer/symfony/security-http@3.2.0-alpha0

Essentials

purl	pkg:composer/symfony/security-http@3.2.0-alpha0
Tags	Ghost

Next non-vulnerable version	7.4.13
Latest non-vulnerable version	8.0.13
Risk score

Vulnerabilities affecting this package (1)

Advisory	Summary	Fixed in package version
CVE-2017-16652	`DefaultAuthenticationSuccessHandler` or `DefaultAuthenticationFailureHandler` take the content of the `_target_path` parameter and generate a redirect response but no check is performed …	2.7.38 Vulnerable 2.8.31 Vulnerable 3.2.14 Vulnerable 3.3.13 Vulnerable

Advisory

Summary

Fixed in package version

CVE-2017-16652

`DefaultAuthenticationSuccessHandler` or `DefaultAuthenticationFailureHandler` take the content of the `_target_path` parameter and generate a redirect response but no check is performed …

2.7.38
Vulnerable

2.8.31
Vulnerable

3.2.14
Vulnerable

3.3.13
Vulnerable

This package is not known to fix any advisories.