Symfony's `Security::login` does not take into account custom `user_checker`

🗓️ 06 Nov 2024 15:13:42Reported by GitHub Advisory DatabaseType

Symfony Security::login issue with custom user_checke

Reporter	Title	Published	Views	Family All 31
Circl	CVE-2024-50341	6 Nov 202421:10	–	circl
CNNVD	Symfony 授权问题漏洞	6 Nov 202400:00	–	cnnvd
CVE	CVE-2024-50341	6 Nov 202421:06	–	cve
Cvelist	CVE-2024-50341 Security::login does not take into account custom user_checker in symfony/security-bundle	6 Nov 202421:06	–	cvelist
Debian CVE	CVE-2024-50341	6 Nov 202421:06	–	debiancve
EUVD	EUVD-2024-3280	3 Oct 202520:07	–	euvd
Friends Of PHP	CVE-2024-50341: Security::login does not take into account custom user_checker	1 Jan 197000:00	–	friendsofphp
Friends Of PHP	CVE-2024-50341: Security::login does not take into account custom user_checker	1 Jan 197000:00	–	friendsofphp
NVD	CVE-2024-50341	6 Nov 202421:15	–	nvd
OpenVAS	Ubuntu: Security Advisory (USN-7272-1)	19 Feb 202500:00	–	openvas

Vulners

Node

symfony symfonyRange7.1.0–7.1.3composer

symfony symfonyRange7.0.0–7.0.10composer

symfony symfonyRange6.2.0–6.4.10composer

symfony security-bundleRange7.1.0–7.1.3composer

symfony security-bundleRange7.0.0–7.0.10composer

symfony security-bundleRange6.2.0–6.4.10composer

Source	Link
github	www.github.com/symfony/symfony/security/advisories/GHSA-jxgr-3v7q-3w9v
github	www.github.com/symfony/symfony/commit/22a0789a0085c3ee96f4ef715ecad8255cf0e105
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security-bundle/CVE-2024-50341.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2024-50341.yaml
symfony	www.symfony.com/cve-2024-50341
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-50341
github	www.github.com/advisories/GHSA-jxgr-3v7q-3w9v

06 Nov 2024 23:40Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.13.1

EPSS0.00145

SSVC