Known vulnerabilities in security-bundle

Vendor: Symfony
Software CPE: cpe:2.3:a:symfony:security-bundle:*:*:*:*:*:*:*:*
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting security-bundle security-bundle is affected by 3 known vulnerabilities: 1 medium, 2 low Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU89124 - Cross-Site Request Forgery (CSRF)
CWE-352 Low
No
No
7.1.0 BETA1 03.05.2024 SB2024050312
#VU71736 - Cross-Site Request Forgery (CSRF)
CVE-2022-24895
CWE-352 Low
No
No
4.4.50, 5.4.20, 6.0.20, 6.1.12, 6.2.6 01.02.2023 SB2023020138
SB2023020144
SB20230816143
and 2 more
#VU58369 - Session Fixation
CVE-2021-41268
CWE-384 Medium
No
No
5.3.12 25.11.2021 SB2021112509
SB2021112510