GHSA-6mjq-9x4w-m3w9

Suggest an improvement
Source
https://github.com/advisories/GHSA-6mjq-9x4w-m3w9
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/05/GHSA-6mjq-9x4w-m3w9/GHSA-6mjq-9x4w-m3w9.json
JSON Data
https://api.test.osv.dev/v1/vulns/GHSA-6mjq-9x4w-m3w9
Published
2024-05-15T21:42:56Z
Modified
2024-11-29T05:31:11.420038Z
Summary
FOSUserBundle Session Hijacking Vulnerability
Details

Versions of FOSUserBundle from 1.2.x to 1.2.4 have been found to contain a security vulnerability related to session hijacking. This issue has been addressed in version 1.2.4, and users are strongly advised to upgrade to the latest version to prevent potential session-related security risks.

Database specific
{
    "nvd_published_at": null,
    "cwe_ids": [],
    "severity": "HIGH",
    "github_reviewed": true,
    "github_reviewed_at": "2024-05-15T21:42:56Z"
}
References

Affected packages

Packagist / friendsofsymfony/user-bundle

Package

Name
friendsofsymfony/user-bundle
Purl
pkg:composer/friendsofsymfony/user-bundle

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.2.0
Fixed
1.2.4

Affected versions

1.*

1.2.0

v1.*

v1.2.1
v1.2.2
v1.2.3