Warxcell

**Name of the Vulnerable Software and Affected Versions** Symfony versions 5.3.0 through 5.3.1 **Description** A vulnerability in Symfony is related to firewall authentication. When an application defines multiple firewalls, the token authenticated by one of the firewalls was available for all other firewalls. This could be abused when the application defines different providers for each part of the application, allowing a user authenticated on a part of the application to be considered authenticated on the rest of the application. **Recommendations** For Symfony versions 5.3.0 through 5.3.1, update to version 5.3.2 or later, where a patch ensures that the authenticated token is only available for the firewall that generates it. As a temporary workaround, consider restricting access to sensitive parts of the application to minimize the risk of exploitation.