Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2025/06/06 12:07 a.m.29 views

Auth0 Symfony SDK Deserialization of Untrusted Data vulnerability

Overview The Auth0 Symfony SDK contains a critical vulnerability due to insecure deserialization of cookie data. If exploited, since SDKs process cookie content without prior authentication, a threat actor could send a specially crafted cookie containing malicious serialized data. Am I Affected?...

9.3CVSS7.1AI score0.00718EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2025/06/06 12:07 a.m.12 views

GHSA-98J6-67V3-MW34 Auth0 Symfony SDK Deserialization of Untrusted Data vulnerability

Overview The Auth0 Symfony SDK contains a critical vulnerability due to insecure deserialization of cookie data. If exploited, since SDKs process cookie content without prior authentication, a threat actor could send a specially crafted cookie containing malicious serialized data. Am I Affected?...

9.3CVSS7.1AI score0.00718EPSS
SaveExploits0References6
Rows per page
Query Builder