Skip to content
OpenAdvisories

Package · Packagist

symfony/security-http

20 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low —
    GHSA-g2qj-pmxm-9f8f

    User enumeration in authentication mechanisms

    Description ----------- The ability to enumerate users was possible without relevant permissions due to different exception messages depending on whether the user existed or not. It was also possible to enumerate users by using a timing attack, by comparing t…

    symfony/symfony symfony/security-http Packagist
  • Low 3.1
    CVE-2015-8124

    Symfony Session Fixation Vulnerability

    Session fixation vulnerability in the "Remember Me" login feature in Symfony 2.3.x before 2.3.35, 2.6.x before 2.6.12, and 2.7.x before 2.7.7 allows remote attackers to hijack web sessions via a session id.

    symfony/symfony symfony symfony/security-http symfony/security Debian Packagist