CVE-2019-18886

Name of the Vulnerable Software and Affected Versions Symfony versions 4.2.0 through 4.2.11 Symfony versions 4.3.0 through 4.3.7

Description An issue was discovered that allows the enumeration of users due to different handling depending on whether the user existed when making unauthorized attempts to use the switch users functionality. This issue is related to symfony/security.

Recommendations For Symfony versions 4.2.0 through 4.2.11, update to a version outside of this range to resolve the issue. For Symfony versions 4.3.0 through 4.3.7, update to a version outside of this range to resolve the issue.