Search for packages
| purl | pkg:composer/symfony/security@4.0.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-5pv8-ppvj-4h68
Aliases: CVE-2021-21424 |
Prevent user enumeration using Guard or the new Authenticator-based Security Description ----------- The ability to enumerate users was possible without … |
Not vulnerable |
|
CVE-2018-11407
|
Improper Authentication An issue was discovered in the Ldap component in Symfony. It allows remote attackers to bypass authentication by … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2021-21424
Aliases: GHSA-5pv8-ppvj-4h68 |
Information Exposure Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The … |
Vulnerable Vulnerable |
|
CVE-2018-11406
|
Cross-Site Request Forgery (CSRF) By default, a user's session is invalidated when the user is logged out. This behavior can … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2018-11385
|
Session Fixation A session fixation vulnerability within the `Guard` login feature may allow an attacker to impersonate a victim towards … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2019-10911
|
Improper Authentication In Symfony, a vulnerability would allow an attacker to authenticate as a privileged user on sites with user … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-g4rg-rw65-8hfg
Aliases: CVE-2018-11385 |
Symfony Session Fixation Vulnerability An issue was discovered in the Security component in Symfony 2.7.x before 2.7.48, 2.8.x before 2.8.41, … |
Vulnerable Vulnerable |
|
GHSA-35c5-28pg-2qg4
Aliases: CVE-2018-11407 |
Symfony Authentication Bypass An issue was discovered in the LDAP component in Symfony 2.8.x before 2.8.37, 3.3.x before 3.3.17, 3.4.x … |
Vulnerable Vulnerable |
|
GHSA-g4g7-q726-v5hg
Aliases: CVE-2018-11406 |
Symfony CSRF Token Fixation An issue was discovered in the Security component in Symfony 2.7.x before 2.7.48, 2.8.x before 2.8.41, … |
Vulnerable Vulnerable |
|
GHSA-89r2-5g34-2g47
Aliases: CVE-2018-19790 |
Symfony Open Redirect An open redirect was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x … |
Vulnerable Vulnerable |
|
GHSA-cchx-mfrc-fwqr
Aliases: CVE-2019-10911 |
Improper authentication in Symfony In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before … |
Vulnerable Vulnerable |