Exploit for CVE-2024-51996

⚠️ CVE-2024-51996 - Symfony RememberMe Auth Bypass Exploit Ex...

CVE-2024-51996

Symphony process is a module for the Symphony PHP framework which executes commands in sub-processes. When consuming a persisted remember-me cookie, Symfony does not check if the username persisted in the database matches the username attached with the cookie, leading to authentication bypass. Th...

Debian dsa-5813 : php-symfony - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5813 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5813-1 [email protected] https://www.debian.org/security/ Moritz...

Debian: Security Advisory (DSA-5813-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 5813-1] symfony security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5813-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 15, 2024 https://www.debian.org/security/faq -...

CVE-2024-51996

Symphony process is a module for the Symphony PHP framework which executes commands in sub-processes. When consuming a persisted remember-me cookie, Symfony does not check if the username persisted in the database matches the username attached with the cookie, leading to authentication bypass. Th...

CVE-2024-51996

creationtimestamp| type| source ---|---|--- 2024-11-13 16:20:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113476554727172279 2024-11-13 18:54:23+00:00| seen| https://t.me/cvedetector/10850 2025-04-15 05:00:08+00:00| published-proof-of-concept|...

CVE-2024-51996

CVE-2024-51996 affects Symfony’s security-http implementation. When a persisted remember-me cookie is used, Symfony does not validate the cookie’s username against the database, allowing an authentication bypass. The issue is fixed in Symfony versions 5.4.47, 6.4.15, and 7.1.8. Public details des...

CVE-2024-51996 Symphony has an Authentication Bypass via RememberMe

Symphony process is a module for the Symphony PHP framework which executes commands in sub-processes. When consuming a persisted remember-me cookie, Symfony does not check if the username persisted in the database matches the username attached with the cookie, leading to authentication bypass. Th...

CVE-2024-51996

Symphony process is a module for the Symphony PHP framework which executes commands in sub-processes. When consuming a persisted remember-me cookie, Symfony does not check if the username persisted in the database matches the username attached with the cookie, leading to authentication bypass. Th...

CVE-2024-51996: Authentication Bypass via persisted RememberMe cookie

More info at https://symfony.com/cve-2024-51996...

CVE-2024-51996: Authentication Bypass via persisted RememberMe cookie

More info at https://symfony.com/cve-2024-51996...