Description
Certain Symfony products are affected by: Incorrect Access Control. This affects Symfony 2.7.30 and Symfony 2.8.23 and Symfony 3.2.10 and Symfony 3.3.3. The type of exploitation is: remote. The component is: Password validator.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | symfony/security | >= 2.7.30, < 2.7.32 | 2.7.32 | GHSA-q87v-q8fw-gmj5 |
| Packagist | symfony/security | >= 2.8.23, < 2.8.25 | 2.8.25 | GHSA-q87v-q8fw-gmj5 |
| Packagist | symfony/security | >= 3.2.10, < 3.2.12 | 3.2.12 | GHSA-q87v-q8fw-gmj5 |
| Packagist | symfony/security | >= 3.3.3, < 3.3.5 | 3.3.5 | GHSA-q87v-q8fw-gmj5 |
| Packagist | symfony/security-core | >= 2.7.30, < 2.7.32 | 2.7.32 | GHSA-q87v-q8fw-gmj5 |
| Packagist | symfony/security-core | >= 2.8.23, < 2.8.25 | 2.8.25 | GHSA-q87v-q8fw-gmj5 |
| Packagist | symfony/security-core | >= 3.2.10, < 3.2.12 | 3.2.12 | GHSA-q87v-q8fw-gmj5 |
| Packagist | symfony/security-core | >= 3.3.3, < 3.3.5 | 3.3.5 | GHSA-q87v-q8fw-gmj5 |
| Packagist | symfony/symfony | >= 2.7.30, < 2.7.32 | 2.7.32 | GHSA-q87v-q8fw-gmj5 |
| Packagist | symfony/symfony | >= 2.8.23, < 2.8.25 | 2.8.25 | GHSA-q87v-q8fw-gmj5 |
| Packagist | symfony/symfony | >= 3.2.10, < 3.2.12 | 3.2.12 | GHSA-q87v-q8fw-gmj5 |
| Packagist | symfony/symfony | >= 3.3.3, < 3.3.5 | 3.3.5 | GHSA-q87v-q8fw-gmj5 |