Session Fixation

🗓️ 16 Feb 2023 09:55:37Reported by Veracode Vulnerability DatabaseType

symfony vulnerability Session Fixation Unauthorized Acces

Reporter	Title	Published	Views	Family All 45
AstraLinux	Astra Linux - уязвимость в symfony	20 May 202605:53	–	astralinux
CNNVD	Sensio Labs Symfony 授权问题漏洞	3 Feb 202300:00	–	cnnvd
CVE	CVE-2022-24895	3 Feb 202321:45	–	cve
Cvelist	CVE-2022-24895 Symfony vulnerable to Session Fixation of CSRF tokens	3 Feb 202321:45	–	cvelist
Debian	[SECURITY] [DLA 3493-1] symfony security update	11 Jul 202323:19	–	debian
Debian CVE	CVE-2022-24895	3 Feb 202321:45	–	debiancve
Tenable Nessus	Debian dla-3493 : php-symfony - security update	12 Jul 202300:00	–	nessus
Tenable Nessus	Fedora 37 : php-symfony4 (2023-74b702f058)	11 Feb 202300:00	–	nessus
Tenable Nessus	Fedora 36 : php-symfony4 (2023-aecde14648)	11 Feb 202300:00	–	nessus
Tenable Nessus	Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS : Symfony vulnerabilities (USN-7272-1)	18 Feb 202500:00	–	nessus

Vulners

Node

sensiolabs symfony/symfonyRangev2.0.0BETA1–2.0.0BETA1php

sensiolabs symfony/symfonyRangev5.0.0-BETA1–5.0.0-BETA1php

sensiolabs symfony/symfonyRangev6.0.0-BETA1–6.0.0-BETA1php

sensiolabs symfony/symfonyRangev6.1.0-BETA1–6.1.0-BETA1php

sensiolabs symfony/symfonyRangev6.2.0-BETA1–6.2.0-BETA1php

Source	Link
symfony	www.symfony.com/blog/cve-2022-24895-csrf-token-fixation
github	www.github.com/symfony/symfony/security/advisories/GHSA-3gv2-29qc-v67m
lists	www.lists.debian.org/debian-lts-announce/2023/07/msg00014.html
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security-bundle/CVE-2022-24895.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2022-24895.yaml
github	www.github.com/symfony/security-bundle/commit/076fd2088ada33d760758d98ff07ddedbf567946
github	www.github.com/symfony/symfony/commit/5909d74ecee359ea4982fcf4331aaf2e489a1fd4

13 Feb 2025 19:38Current

8.4High risk

Vulners AI Score8.4

CVSS 3.16.3 - 8.8

EPSS0.00021

SSVC