Symfony Security-http vulnerabilities
- sensiolabs symfony, symfony security-http +1 more Symfony: Security Firewall Bypass via failure_forward Subrequest: Unauthenticated Access to access_control-Protected GET Routes 8.7 High
- sensiolabs symfony, symfony http-kernel, security-http +2 more Symfony: HEAD Request Bypasses methods: ['GET'] Filter in #[IsGranted] / #[IsSignatureValid] / #[IsCsrfTokenValid] 8.3 High
- sensiolabs symfony, symfony security-http +1 more Symfony: Cas2Handler Derives CAS service URL from Client Host Header → Cross-Service Ticket Replay 7.6 High
- sensiolabs symfony, symfony security-http +1 more Symfony: OidcTokenHandler Accepts JWTs Missing aud/iss/exp Claims 8.8 High