| Package | Affected versions | Patched versions |
|---|---|---|
| symfony/security | ≥ 2.7.30, < 2.7.32≥ 2.8.23, < 2.8.25≥ 3.2.10, < 3.2.12≥ 3.3.3, < 3.3.5 | 2.7.322.8.253.2.123.3.5 |
| symfony/security-core | ≥ 2.7.30, < 2.7.32≥ 2.8.23, < 2.8.25≥ 3.2.10, < 3.2.12≥ 3.3.3, < 3.3.5 | 2.7.322.8.253.2.123.3.5 |
| symfony/symfony | ≥ 2.7.30, < 2.7.32≥ 2.8.23, < 2.8.25≥ 3.2.10, < 3.2.12≥ 3.3.3, < 3.3.5 | 2.7.322.8.253.2.123.3.5 |
| symfony | = 2.7.30= 2.8.23= 3.2.10= 3.3.3 |
Certain Symfony products are affected by: Incorrect Access Control. This affects Symfony 2.7.30 and Symfony 2.8.23 and Symfony 3.2.10 and Symfony 3.3.3. The type of exploitation is: remote. The component is: Password validator.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free