symfony/security-http vulnerabilities (Packagist)
20 vulnerabilities.
-
symfony/security-httpPackagist Symfony: Security Firewall Bypass via failure_forward Subrequest: Unauthenticated Access to access_control-Protected GET Routes 8.7 High -
symfony/security-httpPackagist Symfony: HEAD Request Bypasses methods: ['GET'] Filter in #[IsGranted] / #[IsSignatureValid] / #[IsCsrfTokenValid] 8.3 High -
symfony/security-httpPackagist Symfony: Cas2Handler Derives CAS service URL from Client Host Header → Cross-Service Ticket Replay 7.6 High -
symfony/security-httpPackagist Symfony: OidcTokenHandler Accepts JWTs Missing aud/iss/exp Claims 8.8 High -
symfony/security-httpPackagist Symfony: Identity Spoofing via Unanchored DN Regex in X509Authenticator 9.1 Critical -
symfony/security-httpPackagist Symphony has an Authentication Bypass via RememberMe 7.5 High -
symfony/security-httpPackagist Symfony possible session fixation vulnerability 6.5 Medium -
symfony/security-httpPackagist Authentication granted with multiple firewalls 6.8 Medium -
symfony/security-httpPackagist User enumeration in authentication mechanisms No score -
symfony/security-httpPackagist Prevent user enumeration using Guard or the new Authenticator-based Security 5.3 Medium -
symfony/security-httpPackagist Firewall configured with unanimous strategy was not actually unanimous in symfony/security-http 7.6 High -
symfony/security-httpPackagist User enumeration leak using switch user functionality in Symfony 5.3 Medium -
symfony/security-httpPackagist Improper authentication in Symfony 7.5 High -
symfony/security-httpPackagist Symfony Open Redirect 6.1 Medium -
symfony/security-httpPackagist Symfony CSRF Token Fixation 8.8 High -
symfony/security-httpPackagist Symfony Session Fixation Vulnerability 8.1 High -
symfony/security-httpPackagist Symfony Open Redirect 6.1 Medium -
symfony/security-httpPackagist Symphony Denial of Service Via Overlong Usernames 7.5 High -
symfony/security-httpPackagist Symfony Vulnerable to Timing Attack 7.5 High -
symfony/security-httpPackagist Symfony Session Fixation Vulnerability 6.8 Medium