Prevent user enumeration using Guard or the new Authenticator-based Security

🗓️ 13 May 2021 20:23:02Reported by GitHub Advisory DatabaseType

Prevent user enumeration using new authenticator-based securit

Reporter	Title	Published	Views	Family All 46
AstraLinux	Astra Linux – Vulnerability in symfony	19 Jun 202611:10	–	astralinux
BDU FSTEC	The vulnerability of the Symfony software platform for developing and managing web applications relates to information disclosure, which allows attackers to gain unauthorized access to protected information.	29 Jun 202100:00	–	bdu_fstec
Circl	CVE-2021-21424	15 Apr 202505:00	–	circl
CNNVD	Sensio Labs Symfony 信息泄露漏洞	12 May 202100:00	–	cnnvd
CVE	CVE-2021-21424	13 May 202100:00	–	cve
Cvelist	CVE-2021-21424 Prevent user enumeration using Guard or the new Authenticator-based Security	13 May 202100:00	–	cvelist
Debian	[SECURITY] [DLA 3493-1] symfony security update	11 Jul 202323:19	–	debian
Debian CVE	CVE-2021-21424	13 May 202100:00	–	debiancve
Tenable Nessus	Debian dla-3493 : php-symfony - security update	12 Jul 202300:00	–	nessus
Tenable Nessus	Ubuntu 18.04 ESM / 20.04 ESM : Symfony vulnerabilities (USN-5290-1)	16 Oct 202300:00	–	nessus

Vulners

Node

symfony symfonyRange5.0.0–5.2.9composer

symfony symfonyRange4.0.0–4.4.24composer

symfony symfonyRange2.8.0–3.4.49composer

symfony securityRange4.0.0–4.4.24composer

symfony securityRange2.8.0–3.4.49composer

symfony security-httpRange5.1.0–5.2.8composer

symfony maker-bundleRange1.30.0–1.31.1composer

symfony maker-bundleRange1.27.0–1.29.2composer

symfony security-coreRange5.0.0–5.2.8composer

symfony security-coreRange4.0.0–4.4.23composer

symfony security-coreRange2.8.0–3.4.48composer

symfony security-guardRange5.0.0–5.2.8composer

symfony security-guardRange4.0.0–4.4.23composer

symfony security-guardRange2.8.0–3.4.48composer

symfony securityRange5.0.0–5.2.8composer

Source	Link
github	www.github.com/symfony/symfony/security/advisories/GHSA-5pv8-ppvj-4h68
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-21424
github	www.github.com/symfony/symfony/commit/2a581d22cc621b33d5464ed65c4bc2057f72f011
lists	www.lists.debian.org/debian-lts-announce/2023/07/msg00014.html
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/lexik/jwt-authentication-bundle/CVE-2021-21424.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/maker-bundle/CVE-2021-21424.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security-guard/CVE-2021-21424.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security-http/CVE-2021-21424.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security/CVE-2021-21424.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2021-21424.yaml

26 Feb 2024 12:40Current

1.3Low risk

Vulners AI Score1.3

CVSS 25

CVSS 3.15.3

EPSS0.01712