PT-2024-40131 · Unknown · Fosuserbundle

Published 2024-05-15 · Updated 2024-05-15

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions: FOSUserBundle versions 1.2.x through 1.2.3

Description: A security issue related to session hijacking has been identified. The estimated number of potentially affected devices is not specified. This issue has been addressed in a newer version.

Recommendations: For FOSUserBundle versions 1.2.x through 1.2.3, upgrade to version 1.2.4 or later to prevent potential session-related security risks.

Related Identifiers

GHSA-6MJQ-9X4W-M3W9

Affected Products

Fosuserbundle

References · 5

• https://osv.dev/vulnerability/GHSA-6mjq-9x4w-m3w9 · Vendor Advisory
• https://github.com/FriendsOfSymfony/FOSUserBundle/blob/master/Changelog.md · Note
• https://github.com/FriendsOfSymfony/FOSUserBundle · Note
• https://github.com/FriendsOfSymfony/FOSUserBundle/commit/8e412a70cafd924ad04c7325dae423048861b955 · Note
• https://github.com/FriendsOfPHP/security-advisories/blob/master/friendsofsymfony/user-bundle/2012-07-10-2.yaml · Note