GHSA-6mjq-9x4w-m3w9
FOSUserBundle Session Hijacking Vulnerability
GHSA-6mjq-9x4w-m3w9 is a vulnerability with no CVSS score yet in friendsofsymfony/user-bundle, published May 15, 2024. No source lists public exploit code. Fixed in friendsofsymfony/user-bundle 1.2.4.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1.2.4friendsofsymfony/user-bundle +1 more
Description
Versions of FOSUserBundle from 1.2.x to 1.2.4 have been found to contain a security vulnerability related to session hijacking. This issue has been addressed in version 1.2.4, and users are strongly advised to upgrade to the latest version to prevent potential session-related security risks.
Affected packages
| Package | Affected | Fixed |
|---|---|---|
friendsofsymfony/user-bundlePackagist | 1.2.0 up to 1.2.4 | 1.2.4 |
friendsofsymfony/user-bundlePackagist | 1.2.0 up to 1.2.4, plus listed versions v1.2.1v1.2.2v1.2.3 | 1.2.4 |
What each source reports
GitHub AdvisoriesNo score
FOSUserBundle Session Hijacking Vulnerability
Versions of FOSUserBundle from 1.2.x to 1.2.4 have been found to contain a security vulnerability related to session hijacking. This issue has been addressed in version 1.2.4, and users are strongly advised to upgrade to the latest version to prevent potential session-related security risks.
- Record
GHSA-6mjq-9x4w-m3w9- Updated
- 2026-11-02
OSVNo score
FOSUserBundle Session Hijacking Vulnerability
Versions of FOSUserBundle from 1.2.x to 1.2.4 have been found to contain a security vulnerability related to session hijacking. This issue has been addressed in version 1.2.4, and users are strongly advised to upgrade to the latest version to prevent potential session-related security risks.
- Record
GHSA-6mjq-9x4w-m3w9- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
github.com/FriendsOfSymfony/FOSUserBundle/commit/8e412a70cafd924ad04c7325dae423048861b955