Executive brief
Cookie persistence after password changes in symfony/security-bundle
Affected products
- Packagist symfony/symfony
- Packagist symfony/security-bundle
Junglewise Threat Intelligence
CVE-2021-41268: Cookie persistence after password changes in symfony/security-bundle
CVE-2021-41268 · Severity: low · CVSS 3.1 · Published 2021-11-24
Technologies: symfony/symfony (Packagist). Vendors: Packagist.
Related threats
- Symfony XML Entity Expansion security vulnerability
- Symfony XML decoding attack vector through external entities
- Symfony may allow a user to switch to using another user's identity
- Symfony potential Cross-site Scripting in WebhookController
- Symfony Allows URI Restrictions Bypass Via Double-Encoded String