Skip to content
OpenAdvisories

Package · Packagist

symfony/security-csrf

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2017-16653

    Symfony CSRF Vulnerability

    An issue was discovered in Symfony before 2.7.38, 2.8.31, 3.2.14, 3.3.13, 3.4-BETA5, and 4.0-BETA5. The current implementation of CSRF protection in Symfony (Version >=2) does not use different tokens for HTTP and HTTPS; therefore the token is subject to MITM…

    symfony/symfony symfony symfony symfony/security Debian Ubuntu Packagist