Packagist/friendsofsymfony/user-bundle: high
FOSUserBundle Session Hijacking Vulnerability
Action: Upgrade friendsofsymfony/user-bundle to 1.2.4 or later.
composer require friendsofsymfony/user-bundle:1.2.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.2.0 | 1.2.4 | - |
Fixed versions
| 1.2.4 |
Sources
- osv: GHSA-6mjq-9x4w-m3w9
- https://github.com/FriendsOfSymfony/FOSUserBundle/commit/8e412a70cafd924ad04c7325dae423048861b955
- https://github.com/FriendsOfPHP/security-advisories/blob/master/friendsofsymfony/user-bundle/2012-07-10-2.yaml
- https://github.com/FriendsOfSymfony/FOSUserBundle
- https://github.com/FriendsOfSymfony/FOSUserBundle/blob/master/Changelog.md
published · modified · JSON