Skip to content
OpenAdvisories

Package · Packagist

symfony/security-bundle

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2022-24895

    Symfony vulnerable to Session Fixation of CSRF tokens

    Symfony is a PHP framework for web and console applications and a set of reusable PHP components. When authenticating users Symfony by default regenerates the session ID upon login, but preserves the rest of session attributes. Because this does not clear CSR…

    symfony symfony symfony/symfony symfony Debian Ubuntu Packagist
  • Medium 6.5
    CVE-2021-41268

    Cookie persistence in Symfony

    Symfony/SecurityBundle is the security system for Symfony, a PHP framework for web and console applications and a set of reusable PHP components. Since the rework of the Remember me cookie in version 5.3.0, the cookie is not invalidated when the user changes …

    symfony symfony symfony/symfony symfony/security-bundle Packagist
  • Medium 6.1
    CVE-2018-11408

    Symfony Open Redirect

    The security handlers in the Security component in Symfony in 2.7.x before 2.7.48, 2.8.x before 2.8.41, 3.3.x before 3.3.17, 3.4.x before 3.4.11, and 4.0.x before 4.0.11 have an Open redirect vulnerability when security.http_utils is inlined by a container. N…

    symfony/symfony symfony symfony symfony/security-bundle Debian Ubuntu Packagist