{"action":"Upgrade symfony/security-http to 5.4.31 or later.","affected":[{"fixed":"5.4.31","introduced":"5.4.21"},{"fixed":"6.3.8","introduced":"6.2.7"}],"component":"symfony/security-http","cve_ids":["CVE-2023-46733"],"ecosystem":"Packagist","epss":0.00689,"exploited":false,"fixed_versions":["5.4.31","6.3.8"],"ghsa_id":"GHSA-m2wj-r6g3-fxfx","id":"tcs_01M5KF51X9E2FTDPEWQSPM242G","modified_at":"2026-09-10T03:50:04.290059815Z","published_at":"2023-11-12T15:51:54Z","references":["https://osv.dev/vulnerability/GHSA-m2wj-r6g3-fxfx","https://github.com/symfony/symfony/security/advisories/GHSA-m2wj-r6g3-fxfx","https://nvd.nist.gov/vuln/detail/CVE-2023-46733","https://github.com/symfony/symfony/commit/7467bd7e3f888b333102bc664b5e02ef1e7f88b9","https://github.com/symfony/symfony/commit/dc356499d5ceb86f7cf2b4c7f032eca97061ed74","https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2023-46733.yaml","https://github.com/symfony/symfony","https://symfony.com/cve-2023-46733"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-m2wj-r6g3-fxfx","url":"https://osv.dev/vulnerability/GHSA-m2wj-r6g3-fxfx"}],"summary":"Symfony possible session fixation vulnerability"}