Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Markuspoerschke

#33570of 53,633
7.8Total CVSS
Vulnerabilities · 1
PT-2024-9246
7.8
2024-02-07
Symfony · Symfony · CVE-2024-36611
Name of the Vulnerable Software and Affected Versions: Symfony version 7.07 Description: A security issue was identified in the FormLoginAuthenticator component of Symfony, where it failed to adequately handle cases where the `username` or `password` field of a login request is empty. This flaw could lead to various security risks, including improper authentication logic handling or denial of service. However, the supplier has concluded that this report is false. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.