GHSA-6mjq-9x4w-m3w9
Suggest an improvement- Source
- https://github.com/advisories/GHSA-6mjq-9x4w-m3w9
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/05/GHSA-6mjq-9x4w-m3w9/GHSA-6mjq-9x4w-m3w9.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-6mjq-9x4w-m3w9
- Published
- 2024-05-15T21:42:56Z
- Modified
- 2024-11-29T05:40:46.397504Z
- Summary
- FOSUserBundle Session Hijacking Vulnerability
- Details
-
Versions of FOSUserBundle from 1.2.x to 1.2.4 have been found to contain a security vulnerability related to session hijacking. This issue has been addressed in version 1.2.4, and users are strongly advised to upgrade to the latest version to prevent potential session-related security risks.
- Database specific
{ "nvd_published_at": null, "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2024-05-15T21:42:56Z" }- References
-
- https://github.com/FriendsOfSymfony/FOSUserBundle/commit/8e412a70cafd924ad04c7325dae423048861b955
- https://github.com/FriendsOfPHP/security-advisories/blob/master/friendsofsymfony/user-bundle/2012-07-10-2.yaml
- https://github.com/FriendsOfSymfony/FOSUserBundle
- https://github.com/FriendsOfSymfony/FOSUserBundle/blob/master/Changelog.md
Affected packages
Packagist / friendsofsymfony/user-bundle
Package
- Name
- friendsofsymfony/user-bundle
- Purl
- pkg:composer/friendsofsymfony/user-bundle