CVE-2024-51996
1 advisory.
Packagist/symfony/security-http CVE-2024-51996: high 7.5
Symfony has an Authentication Bypass via RememberMe
Action: Upgrade symfony/security-http to 5.4.47 or later.
composer require symfony/security-http:5.4.47composer require symfony/security-http:6.4.15composer require symfony/security-http:7.1.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.3.0 | 5.4.47 | - |
| 6.0.0-BETA1 | 6.4.15 | - |
| 7.0.0-BETA1 | 7.1.8 | - |
Fixed versions
| 5.4.47 | 6.4.15 | 7.1.8 |
Sources
- osv: GHSA-cg23-qf8f-62rr
- https://github.com/symfony/symfony/security/advisories/GHSA-cg23-qf8f-62rr
- https://nvd.nist.gov/vuln/detail/CVE-2024-51996
- https://github.com/symfony/symfony/commit/81354d392c5f0b7a52bcbd729d6f82501e94135a
- https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security-http/CVE-2024-51996.yaml
- https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2024-51996.yaml
- https://github.com/symfony/symfony
- https://symfony.com/cve-2024-51996
CVE-2024-51996 · published · modified · JSON