Search for packages
| purl | pkg:composer/symfony/security@2.3.16 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-j5jh-hpr4-h332
Aliases: CVE-2015-8124 |
Symfony Session Fixation Vulnerability A session fixation vulnerability within the "Remember Me" login feature allows an attacker to impersonate the … |
Vulnerable |
|
GHSA-g97c-jfx6-xvxh
Aliases: CVE-2015-8125 |
Symfony Vulnerable to Timing Attack Symfony 2.3.x before 2.3.35, 2.6.x before 2.6.12, and 2.7.x before 2.7.7 might allow remote attackers … |
Vulnerable |
|
CVE-2016-4423
|
CVE-2016-4423: Large username storage in session The attemptAuthentication function in `Component/Security/Http/Firewall/UsernamePasswordFormAuthenticationListener.php` does not limit the length of a username stored … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2018-11406
|
Cross-Site Request Forgery (CSRF) By default, a user's session is invalidated when the user is logged out. This behavior can … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2018-11385
|
Session Fixation A session fixation vulnerability within the `Guard` login feature may allow an attacker to impersonate a victim towards … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-whgv-8cg3-7hcm
Aliases: CVE-2016-4423 |
Symphony Denial of Service Via Overlong Usernames The attemptAuthentication function in `Component/Security/Http/Firewall/UsernamePasswordFormAuthenticationListener.php` in Symfony before 2.3.41, 2.7.x before 2.7.13, 2.8.x … |
Vulnerable Vulnerable |
|
GHSA-jjx5-fq5g-8xpc
Aliases: CVE-2016-1902 |
Symfony Cryptographic Vulnerability The nextBytes function in the SecureRandom class in Symfony before 2.3.37, 2.6.x before 2.6.13, and 2.7.x before … |
Vulnerable Vulnerable |