Executive brief
User enumeration in authentication mechanisms
Affected products
- Packagist symfony/symfony
- Packagist symfony/security-http
Junglewise Threat Intelligence
User enumeration in authentication mechanisms
Severity: info ยท Published 2021-05-17
Technologies: symfony/symfony (Packagist), symfony/security-http (Packagist). Vendors: Packagist.
Related threats
- Withdrawn Advisory: Symfony http-security has authentication bypass
- Symfony XML Entity Expansion security vulnerability
- Symfony XML decoding attack vector through external entities
- Symfony may allow a user to switch to using another user's identity
- Symfony potential Cross-site Scripting in WebhookController