Skip to content
OpenAdvisories
High DSA-5813-1 1 CVE

symfony - security update

Published Nov 15, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 12 symfony 5.4.23+dfsg-1+deb12u4

Vulnerabilities 1

  • High 7.5
    CVE-2024-51996 Public exploit

    Symphony has an Authentication Bypass via RememberMe

    Symphony process is a module for the Symphony PHP framework which executes commands in sub-processes. When consuming a persisted remember-me cookie, Symfony does not check if the username persisted in the database matches the username attached with the cookie…

    symfony symfony symfony symfony Debian Ubuntu Packagist