CVE-2024-36611

In Symfony v7.07, a security vulnerability was identified in the FormLoginAuthenticator component, where it failed to adequately handle cases where th...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

In Symfony v7.07, a security vulnerability was identified in the FormLoginAuthenticator component, where it failed to adequately handle cases where the username or password field of a login request is empty. This flaw could lead to various security risks, including improper authentication logic handling or denial of service. NOTE: the Supplier has concluded that this is a false report.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Debian DEBIAN-CVE-2024-36611 symfony
Ubuntu UBUNTU-CVE-2024-36611 symfony

Références

advisory github.com
advisory nvd.nist.gov
patch github.com
patch github.com
report github.com
web gist.github.com
web github.com