Search for packages
| purl | pkg:composer/symfony/security@2.0.0 |
| Tags | Ghost |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-cr49-fx2v-9p57
Aliases: CVE-2013-5958 |
Symfony Denial of Service Via Long Password Hashing The Security component in Symfony 2.0.x before 2.0.25, 2.1.x before 2.1.13, 2.2.x … |
Vulnerable |
|
GHSA-83c3-qx27-2rwr
Aliases: CVE-2012-6431 |
Symfony Allows URI Restrictions Bypass Via Double-Encoded String On the Symfony 2.0.x version, there's a security issue that allows access … |
Vulnerable |
|
CVE-2018-11406
|
Cross-Site Request Forgery (CSRF) By default, a user's session is invalidated when the user is logged out. This behavior can … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2018-11385
|
Session Fixation A session fixation vulnerability within the `Guard` login feature may allow an attacker to impersonate a victim towards … |
Vulnerable Vulnerable Vulnerable |