CVE-2021-41268
2 advisories.
Packagist/symfony/security-bundle CVE-2021-41268: medium 6.5
Cookie persistence after password changes in symfony/security-bundle
Action: Upgrade symfony/security-bundle to 5.3.12 or later.
composer require symfony/security-bundle:5.3.12Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.3.0 | 5.3.12 | - |
Fixed versions
| 5.3.12 |
Sources
- osv: GHSA-qw36-p97w-vcqr
- https://github.com/symfony/symfony/security/advisories/GHSA-qw36-p97w-vcqr
- https://nvd.nist.gov/vuln/detail/CVE-2021-41268
- https://github.com/symfony/symfony/pull/44243
- https://github.com/symfony/symfony/commit/36a808b857cd3240244f4b224452fb1e70dc6dfc
- https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security-bundle/CVE-2021-41268.yaml
- https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2021-41268.yaml
- https://github.com/symfony/symfony
- https://github.com/symfony/symfony/releases/tag/v5.3.12
- https://symfony.com/cve-2021-41268
CVE-2021-41268 · published · modified · JSON
Packagist/symfony/symfony CVE-2021-41268: medium 6.5
Cookie persistence after password changes in symfony/security-bundle
Action: Upgrade symfony/symfony to 5.3.12 or later.
composer require symfony/symfony:5.3.12Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.3.0 | 5.3.12 | - |
Fixed versions
| 5.3.12 |
Sources
- osv: GHSA-qw36-p97w-vcqr#Packagist/symfony/symfony
- https://github.com/symfony/symfony/security/advisories/GHSA-qw36-p97w-vcqr
- https://nvd.nist.gov/vuln/detail/CVE-2021-41268
- https://github.com/symfony/symfony/pull/44243
- https://github.com/symfony/symfony/commit/36a808b857cd3240244f4b224452fb1e70dc6dfc
- https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security-bundle/CVE-2021-41268.yaml
- https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2021-41268.yaml
- https://github.com/symfony/symfony
- https://github.com/symfony/symfony/releases/tag/v5.3.12
- https://symfony.com/cve-2021-41268
CVE-2021-41268 · published · modified · JSON