Executive brief
Authentication granted to all firewalls instead of just one
Affected products
- Packagist symfony/symfony
- Packagist symfony/security-http
Junglewise Threat Intelligence
CVE-2021-32693: Authentication granted to all firewalls instead of just one
CVE-2021-32693 · Severity: low · CVSS 3.1 · Published 2021-06-21
Technologies: symfony/symfony (Packagist), symfony/security-http (Packagist). Vendors: Packagist.
Related threats
- Withdrawn Advisory: Symfony http-security has authentication bypass
- Symfony XML Entity Expansion security vulnerability
- Symfony XML decoding attack vector through external entities
- Symfony may allow a user to switch to using another user's identity
- Symfony potential Cross-site Scripting in WebhookController