Vendor
symfony
67 known vulnerabilities.
Products
symfony 55
ux 10
html-sanitizer 5
security-http 4
yaml 2
twilio-notifier 1
polyfill 1
polyfill-intl-idn 1
monolog-bridge 1
mailer 1
mailomat-mailer 1
json-path 1
dom-crawler 1
ux-autocomplete 1
runtime 1
http-kernel 1
lox24-notifier 1
mailjet-mailer 1
routing 1
http-client 1
http-foundation 1
twig-bridge 1
web-profiler-bundle 1
mime 1
1 result · Clear filters · Feed
-
Critical 9.1
Symfony: Identity Spoofing via Unanchored DN Regex in X509Authenticator
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, X509Authenticator extracts the user identifier from $_SERVER['SSL_CLIENT_S_DN'] with an unanchored regex that matche…