Skip to content
OpenAdvisories

Package · Packagist

symfony/security-http

20 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.5
    CVE-2024-51996 Public exploit

    Symphony has an Authentication Bypass via RememberMe

    Symphony process is a module for the Symphony PHP framework which executes commands in sub-processes. When consuming a persisted remember-me cookie, Symfony does not check if the username persisted in the database matches the username attached with the cookie…