Описание
An issue was discovered in the Security component in Symfony 2.7.x before 2.7.48, 2.8.x before 2.8.41, 3.3.x before 3.3.17, 3.4.x before 3.4.11, and 4.0.x before 4.0.11. A session fixation vulnerability within the "Guard" login feature may allow an attacker to impersonate a victim towards the web application if the session id value was previously known to the attacker.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | ignored | end of standard support, was needed |
| cosmic | not-affected | 3.4.15+dfsg-2ubuntu4 |
| devel | not-affected | 3.4.15+dfsg-2ubuntu4 |
| disco | not-affected | 3.4.15+dfsg-2ubuntu4 |
| eoan | not-affected | 3.4.15+dfsg-2ubuntu4 |
| esm-apps/bionic | needed | |
| esm-apps/focal | not-affected | 3.4.15+dfsg-2ubuntu4 |
| esm-apps/jammy | not-affected | 3.4.15+dfsg-2ubuntu4 |
| esm-apps/noble | not-affected | 3.4.15+dfsg-2ubuntu4 |
Показывать по
Ссылки на источники
EPSS
6.8 Medium
CVSS2
8.1 High
CVSS3
Связанные уязвимости
An issue was discovered in the Security component in Symfony 2.7.x before 2.7.48, 2.8.x before 2.8.41, 3.3.x before 3.3.17, 3.4.x before 3.4.11, and 4.0.x before 4.0.11. A session fixation vulnerability within the "Guard" login feature may allow an attacker to impersonate a victim towards the web application if the session id value was previously known to the attacker.
An issue was discovered in the Security component in Symfony 2.7.x bef ...
Уязвимость компонента Security программной платформы для разработки и управления веб-приложениями Symfony, позволяющая нарушителю повысить свои привилегии
EPSS
6.8 Medium
CVSS2
8.1 High
CVSS3