Lucene search
+L

3 matches found

Veracode
Veracode
added 2024/05/20 5:46 a.m.12 views

Identity Spoofing

doctrine/doctrine-module is vulnerable to Identity Spoofing. The vulnerability is due to improper handling of numerically valued credentials in DoctrineModule\Authentication\Adapter\ObjectRepository, which allows attackers to obtain valid authentication identities without knowing the user's actua...

7.2AI score
SaveExploits0
OSV
OSV
added 2024/05/15 6:45 p.m.10 views

GHSA-9WV8-3H8H-X2WC doctrine/doctrine-module zero-valued authentication credentials vulnerability

it is possible under certain circumstances to obtain a valid Zend\Authentication identity even without knowing the user's credentials by using a numerically valued credential in DoctrineModule\Authentication\Adapter\ObjectRepository...

6.5CVSS6.9AI score
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2024/05/15 6:45 p.m.14 views

doctrine/doctrine-module zero-valued authentication credentials vulnerability

it is possible under certain circumstances to obtain a valid Zend\Authentication identity even without knowing the user's credentials by using a numerically valued credential in DoctrineModule\Authentication\Adapter\ObjectRepository...

6.9AI score
SaveExploits0References5Affected Software1
Rows per page
Query Builder