2095 matches found
Command Hijacking
symfony is vulnerable to Command Hijacking. The vulnerability is due to insecure handling of executable files in the current working directory by the Process class, allowing an attacker to execute arbitrary code by placing a malicious cmd.exe file in the directory...
Debian dsa-5813 : php-symfony - security update
The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5813 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5813-1 [email protected] https://www.debian.org/security/ Moritz...
Debian: Security Advisory (DSA-5813-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 5813-1] symfony security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5813-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 15, 2024 https://www.debian.org/security/faq -...
Sylius 安全漏洞
Sylius is a suite of open source e-commerce platforms based on the Symfony framework by the Polish company Sylius. A security vulnerability exists in Sylius. An attacker exploiting the vulnerability could execute malicious scripts in a user's browser...
DSA-5813-1 symfony - security update
Bulletin has no description...
The vulnerability of the Symfony software platform for developing and managing web applications arises from the lack of measures taken to neutralize special elements, allowing attackers to execute arbitrary code.
The vulnerability of the Symfony software platform for developing and managing web applications exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Symfony has an Authentication Bypass via RememberMe
Description When consuming a persisted remember-me cookie, Symfony does not check if the username persisted in the database matches the username attached with the cookie, leading to authentication bypass. Resolution The PersistentRememberMeHandler class now ensures the submitted username is the...
GHSA-CG23-QF8F-62RR Symfony has an Authentication Bypass via RememberMe
Description When consuming a persisted remember-me cookie, Symfony does not check if the username persisted in the database matches the username attached with the cookie, leading to authentication bypass. Resolution The PersistentRememberMeHandler class now ensures the submitted username is the...
CVE-2024-51996
Symphony process is a module for the Symphony PHP framework which executes commands in sub-processes. When consuming a persisted remember-me cookie, Symfony does not check if the username persisted in the database matches the username attached with the cookie, leading to authentication bypass. Th...
UBUNTU-CVE-2024-51996
Symphony process is a module for the Symphony PHP framework which executes commands in sub-processes. When consuming a persisted remember-me cookie, Symfony does not check if the username persisted in the database matches the username attached with the cookie, leading to authentication bypass. Th...
Authentication Bypass
Overview symfony/security-http is a provides an infrastructure for sophisticated authorization systems, which makes it possible to easily separate the actual authorization logic from so called user providers that hold the users credentials. Affected versions of this package are vulnerable to...
Authentication Bypass
Overview symfony/symfony is a PHP framework for web applications and a set of reusable PHP components. Affected versions of this package are vulnerable to Authentication Bypass via the consumeRememberMeCookie function due to improper validation between the username persisted in the database and t...
CVE-2024-51996 Symphony has an Authentication Bypass via RememberMe
Symphony process is a module for the Symphony PHP framework which executes commands in sub-processes. When consuming a persisted remember-me cookie, Symfony does not check if the username persisted in the database matches the username attached with the cookie, leading to authentication bypass. Th...
CVE-2024-51996
CVE-2024-51996 affects Symfony’s security-http implementation. When a persisted remember-me cookie is used, Symfony does not validate the cookie’s username against the database, allowing an authentication bypass. The issue is fixed in Symfony versions 5.4.47, 6.4.15, and 7.1.8. Public details des...
Debian: Security Advisory (DSA-5809-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 5809-1] symfony security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5809-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 11, 2024 https://www.debian.org/security/faq -...
Debian dsa-5809 : php-symfony - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5809 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5809-1 [email protected] https://www.debian.org/securit...
DSA-5809-1 symfony - security update
Bulletin has no description...
Symfony < 5.4.46 / 6.x < 6.4.14 / 7.x < 7.1.7 Improper Input Handling
Symfony versions prior to 5.4.46 or 6.x prior to 6.4.14 or 7.x prior to 7.1.7 is vulnerable when the registerargcargv php directive is set to 'on' and users call any URL with a special crafted query string, they are able to change the environment or debug mode used by the kernel when handling the...