5 matches found
Session Fixation
symfony is vulnerable to session fixation. A malicious user that has access to a PHPSESSID can use it through the Guard Authentication feature in a Symfony application to impersonate another user...
8.1CVSS6.8AI score0.02014EPSS
SaveExploits0References6Affected Software1
CVE-2018-11385: Session Fixation Issue for Guard Authentication
More info at https://symfony.com/cve-2018-11385...
8.1CVSS7.2AI score0.02014EPSS
SaveExploits0Affected Software1
CVE-2018-11385: Session Fixation Issue for Guard Authentication
More info at https://symfony.com/cve-2018-11385...
8.1CVSS7.2AI score0.02014EPSS
SaveExploits0Affected Software1
20