Описание
In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, a vulnerability would allow an attacker to authenticate as a privileged user on sites with user registration and remember me login functionality enabled. This is related to symfony/security.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| cosmic | DNE | |
| devel | DNE | |
| disco | DNE | |
| eoan | DNE | |
| esm-apps/xenial | not-affected | |
| esm-infra-legacy/trusty | not-affected | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| groovy | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needed |
| cosmic | ignored | end of life |
| devel | not-affected | 3.4.22+dfsg-2 |
| disco | ignored | end of life |
| eoan | not-affected | 3.4.22+dfsg-2 |
| esm-apps/bionic | needed | |
| esm-apps/focal | not-affected | 3.4.22+dfsg-2 |
| esm-apps/jammy | not-affected | 3.4.22+dfsg-2 |
| esm-apps/noble | not-affected | 3.4.22+dfsg-2 |
| esm-apps/xenial | needed |
Показывать по
EPSS
6 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, a vulnerability would allow an attacker to authenticate as a privileged user on sites with user registration and remember me login functionality enabled. This is related to symfony/security.
In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x ...
Уязвимость функции generateCookieHash (symfony/security) программной платформы для разработки и управления веб-приложениями Symfony, позволяющая нарушителю обойти процедуру аутентификации
EPSS
6 Medium
CVSS2
7.5 High
CVSS3