GHSA-6mjq-9x4w-m3w9
GHSA-6mjq-9x4w-m3w9 · FOSUserBundle Session Hijacking Vulnerability
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Versions of FOSUserBundle from 1.2.x to 1.2.4 have been found to contain a security vulnerability related to session hijacking. This issue has been addressed in version 1.2.4, and users are strongly advised to upgrade to the latest version to prevent potential session-related security risks.
Corrección disponible
- Publicación
- Actualización
Pila tecnológica: php
Productos y versiones afectados
friendsofsymfony/user-bundle Packagist
- Versiones
- 1.2.0
- v1.2.1
- v1.2.2
- v1.2.3
- Intervalos de versiones afectados
- ECOSYSTEM: ≥ 1.2.0, < 1.2.4
Actualiza a 1.2.4
Fuentes originales
- https://github.com/FriendsOfSymfony/FOSUserBundle/commit/8e412a70cafd924ad04c7325dae423048861b955
- https://github.com/FriendsOfPHP/security-advisories/blob/master/friendsofsymfony/user-bundle/2012-07-10-2.yaml
- https://github.com/FriendsOfSymfony/FOSUserBundle
- https://github.com/FriendsOfSymfony/FOSUserBundle/blob/master/Changelog.md
- https://osv.dev/vulnerability/GHSA-6mjq-9x4w-m3w9