FrameworkUserBundle Generates Error Message Containing Sensitive Information

高 7.5CVE-2015-10012 · GHSA-6m7c-45ff-3328 · 03/01/2023 公開 · 17/06/2026 更新

要点

CVE-2015-10012 は sumocoders/framework-user-bundle, frameworkuserbundle (sumocoders) に影響する深刻度「高」 (CVSS 7.5) の脆弱性です。
今後30日間に悪用される確率（EPSS）：0.88%（全脆弱性の 59.3% より高い）。
対処：1.4.0 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
sumocoders/framework-user-bundle Packagist	`< 1.4.0`	`1.4.0`
frameworkuserbundle sumocoders	`< 1.4.0`	`1.4.0`

概要

A vulnerability was found in sumocoders FrameworkUserBundle up to 1.3.x. It has been rated as problematic. Affected by this issue is some unknown functionality of the file Resources/views/Security/login.html.twig. The manipulation leads to information exposure through error message. Upgrading to version 1.4.0 can address this issue. The name of the patch is abe4993390ba9bd7821ab12678270556645f94c8. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-217268.

NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

NVD の説明

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in sumocoders FrameworkUserBundle up to 1.3.x. It has been rated as problematic. Affected by this issue is some unknown functionality of the file Resources/views/Security/login.html.twig. The manipulation leads to information exposure through error message. Upgrading to version 1.4.0 is able to address this issue. The name of the patch is abe4993390ba9bd7821ab12678270556645f94c8. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-217268. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.