Beveiligingsadvies

CVE-2026-48489

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-14 19:14:12

Laatst bijgewerkt 2026-07-16 14:40:10

Toegewezen door GitHub_M

CVSS-score 8.7

Status PUBLISHED

Beschrijving

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.53, 6.4.41, 7.4.13, and 8.0.13, DefaultAuthenticationFailureHandler honored the request-supplied _failure_path parameter when failure_forward: true was enabled, allowing an unauthenticated failing login request to dispatch a subrequest to access_control-protected GET routes that skipped firewall listeners. This issue is fixed in versions 5.4.53, 6.4.41, 7.4.13, and 8.0.13.

← Alle CVE's bekijken Bekijk op cve.org ↗