symfony/security-http Security Advisories - Packagist

packagist symfony/symfony, symfony/security, symfony/security-http, symfony/maker-bundle, lexik/jwt-authentication-bundle, symfony/security-core, symfony/security-guard

High

over 5 years ago

Improper authentication in Symfony MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWNjaHgtbWZyYy1md3Fy

packagist symfony/symfony, symfony/security, symfony/security-http

Moderate

almost 6 years ago

User enumeration leak using switch user functionality in Symfony MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTR2cGMtNWp4NC1jZnFn

packagist symfony/symfony, symfony/security-http

Filter by Severity

High 6 Moderate 5 Low 2

ecosyste.ms

Data

Tools

Indexes

Applications

Experiments

Advisories

symfony/security-http

Symfony has an Authentication Bypass via RememberMe GSA_kwCzR0hTQS1jZzIzLXFmOGYtNjJycs4ABBTJ

Symfony possible session fixation vulnerability GSA_kwCzR0hTQS1tMndqLXI2ZzMtZnhmeM4AA3Cx

Symphony Denial of Service Via Overlong Usernames GSA_kwCzR0hTQS13aGd2LThjZzMtN2hjbc4AAdU9

Symfony Vulnerable to Timing Attack GSA_kwCzR0hTQS1nOTdjLWpmeDYteHZ4aM4AAcl9

Symfony Session Fixation Vulnerability GSA_kwCzR0hTQS1qNWpoLWhwcjQtaDMzMs4AAV_7

Symfony Session Fixation Vulnerability GSA_kwCzR0hTQS1nNHJnLXJ3NjUtOGhmZ84AAT6-

Symfony CSRF Token Fixation GSA_kwCzR0hTQS1nNGc3LXE3MjYtdjVoZ84AATux

Symfony Open Redirect GSA_kwCzR0hTQS04OXIyLTVnMzQtMmc0N84AATfR

Authentication granted to all firewalls instead of just one MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXJmY2YtbTY3bS1qY3Jx

User enumeration in authentication mechanisms MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWcycWotcG14bS05Zjhm

Prevent user enumeration using Guard or the new Authenticator-based Security MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTVwdjgtcHB2ai00aDY4

Improper authentication in Symfony MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWNjaHgtbWZyYy1md3Fy

User enumeration leak using switch user functionality in Symfony MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTR2cGMtNWp4NC1jZnFn

Filter by Severity