2 matches found
PT-2024-40166 · Symfony +1 · Symfony +1
Name of the Vulnerable Software and Affected Versions: Symfony versions prior to 2.0.6 Description: The issue allows a user to switch to another user's account by changing their username via a form to an existing username, resulting in a validation error but modifying the user object in the sessi...
SUSE CVE-2016-9583
An out-of-bounds heap read vulnerability was found in the jpcpinextpcrl function of jasper before 2.0.6 when processing crafted input...