Skip to content
OpenAdvisories

Package · Packagist

doctrine/doctrine-module

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.5

    doctrine/doctrine-module zero-valued authentication credentials vulnerability

    it is possible (under certain circumstances) to obtain a valid `Zend\Authentication` identity even without knowing the user's credentials by using a numerically valued credential in `DoctrineModule\Authentication\Adapter\ObjectRepository`.