GHSA-6mjq-9x4w-m3w9

Suggest an improvement
Source
https://github.com/advisories/GHSA-6mjq-9x4w-m3w9
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/05/GHSA-6mjq-9x4w-m3w9/GHSA-6mjq-9x4w-m3w9.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-6mjq-9x4w-m3w9
Published
2024-05-15T21:42:56Z
Modified
2024-11-29T05:40:46Z
Summary
FOSUserBundle Session Hijacking Vulnerability
Details

Versions of FOSUserBundle from 1.2.x to 1.2.4 have been found to contain a security vulnerability related to session hijacking. This issue has been addressed in version 1.2.4, and users are strongly advised to upgrade to the latest version to prevent potential session-related security risks.

Database specific 
{
    "cwe_ids":  [],
    "github_reviewed":  true,
    "github_reviewed_at":  "2024-05-15T21:42:56Z",
    "nvd_published_at":  null,
    "severity":  "HIGH"
}
References

Affected packages

Packagist / friendsofsymfony/user-bundle

Package

Name
friendsofsymfony/user-bundle
Purl
pkg:composer/friendsofsymfony/user-bundle

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.2.0
Fixed
1.2.4

Affected versions

1.*
1.2.0
v1.*
v1.2.1
v1.2.2
v1.2.3

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/05/GHSA-6mjq-9x4w-m3w9/GHSA-6mjq-9x4w-m3w9.json"