Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Gndk

#29785of 56,328
9Total CVSS
Vulnerabilities · 1
PT-2021-3455
9.0
2021-06-17
Symfony · Symfony · CVE-2021-32693
**Name of the Vulnerable Software and Affected Versions** Symfony versions 5.3.0 through 5.3.1 **Description** A vulnerability in Symfony is related to firewall authentication. When an application defines multiple firewalls, the token authenticated by one of the firewalls was available for all other firewalls. This could be abused when the application defines different providers for each part of the application, allowing a user authenticated on a part of the application to be considered authenticated on the rest of the application. **Recommendations** For Symfony versions 5.3.0 through 5.3.1, update to version 5.3.2 or later, where a patch ensures that the authenticated token is only available for the firewall that generates it. As a temporary workaround, consider restricting access to sensitive parts of the application to minimize the risk of exploitation.