Lucene search
+L

1 matches found

OSV
OSV
added 2026/05/28 5:22 p.m.28 views

GHSA-64HG-93W9-FC35 Symfony's Mailjet Mailer Webhook Parser Never Verifies the Configured Secret — Unauthenticated Webhook Event Injection

Description The Mailjet mailer bridge and the LOX24 SMS notifier bridge both ship webhook request parsers used to authenticate and decode the event callbacks each provider POSTs to an application's webhook endpoint. Their doParseRequest $request, \SensitiveParameter string $secret methods receive...

8.7CVSS5.7AI score0.00348EPSS
SaveExploits0References7
Rows per page
Query Builder