GHSA-9WV8-3H8H-X2WC doctrine/doctrine-module zero-valued authentication credentials vulnerability

it is possible under certain circumstances to obtain a valid Zend\Authentication identity even without knowing the user's credentials by using a numerically valued credential in DoctrineModule\Authentication\Adapter\ObjectRepository...

doctrine/doctrine-module zero-valued authentication credentials vulnerability

it is possible under certain circumstances to obtain a valid Zend\Authentication identity even without knowing the user's credentials by using a numerically valued credential in DoctrineModule\Authentication\Adapter\ObjectRepository...

PT-2024-40230 · Unknown · Doctrinemodule

Name of the Vulnerable Software and Affected Versions: DoctrineModule versions affected versions not specified Description: The issue allows an attacker to obtain a valid ZendAuthentication identity without knowing the user's credentials under certain circumstances. This is achieved by utilizing ...