Prevent user enumeration using Guard or the new Authenticator-based Security

🗓️ 13 May 2021 20:23:02Reported by GitHub Advisory DatabaseType

Prevent user enumeration using new authenticator-based securit

Reporter	Title	Published	Views	Family All 45
AstraLinux	Astra Linux - уязвимость в symfony	20 May 202605:53	–	astralinux
Circl	CVE-2021-21424	15 Apr 202505:00	–	circl
CNNVD	Sensio Labs Symfony 信息泄露漏洞	12 May 202100:00	–	cnnvd
CVE	CVE-2021-21424	13 May 202100:00	–	cve
Cvelist	CVE-2021-21424 Prevent user enumeration using Guard or the new Authenticator-based Security	13 May 202100:00	–	cvelist
Debian	[SECURITY] [DLA 3493-1] symfony security update	11 Jul 202323:19	–	debian
Debian CVE	CVE-2021-21424	13 May 202100:00	–	debiancve
Tenable Nessus	Debian dla-3493 : php-symfony - security update	12 Jul 202300:00	–	nessus
Tenable Nessus	Ubuntu 18.04 ESM / 20.04 ESM : Symfony vulnerabilities (USN-5290-1)	16 Oct 202300:00	–	nessus
EUVD	EUVD-2021-0960	7 Oct 202500:30	–	euvd

Vulners

Node

symfony symfonyRange5.0.0–5.2.9composer

symfony symfonyRange4.0.0–4.4.24composer

symfony symfonyRange2.8.0–3.4.49composer

symfony securityRange4.0.0–4.4.24composer

symfony securityRange2.8.0–3.4.49composer

symfony security-httpRange5.1.0–5.2.8composer

symfony maker-bundleRange1.30.0–1.31.1composer

symfony maker-bundleRange1.27.0–1.29.2composer

symfony security-coreRange5.0.0–5.2.8composer

symfony security-coreRange4.0.0–4.4.23composer

symfony security-coreRange2.8.0–3.4.48composer

symfony security-guardRange5.0.0–5.2.8composer

symfony security-guardRange4.0.0–4.4.23composer

symfony security-guardRange2.8.0–3.4.48composer

symfony securityRange5.0.0–5.2.8composer

Source	Link
github	www.github.com/symfony/symfony/security/advisories/GHSA-5pv8-ppvj-4h68
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-21424
github	www.github.com/symfony/symfony/commit/2a581d22cc621b33d5464ed65c4bc2057f72f011
lists	www.lists.debian.org/debian-lts-announce/2023/07/msg00014.html
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/lexik/jwt-authentication-bundle/CVE-2021-21424.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/maker-bundle/CVE-2021-21424.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security-guard/CVE-2021-21424.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security-http/CVE-2021-21424.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security/CVE-2021-21424.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2021-21424.yaml

26 Feb 2024 12:40Current

1.3Low risk

Vulners AI Score1.3

CVSS 25

CVSS 3.15.3

EPSS0.00337