CVE-2019-16768 Internal exception message exposure for login action in Sylius

In affected versions of Sylius, exception messages from internal exceptions like database exception are wrapped by \Symfony\Component\Security\Core\Exception\AuthenticationServiceException and propagated through the system to UI. Therefore, some internal system information may leak and be visible...

CVE-2019-16768

CVE-2019-16768 affects Sylius: internal exception messages from login errors could leak system details to users. The root cause is exception messages from internal exceptions (e.g., database errors) being wrapped and surfaced in the UI via the login flow. Affected versions are fixed in Sylius rel...