CVE-2023-46733: Possible session fixation

Affected versions Symfony versions >=5.4.21, <5.4.31, and >= 6.2.7, < 6.3.8 of the Symfony Security HTTP component are affected by this security issue. The issue has been fixed in Symfony 5.4.31, 6.3.8. Description SessionStrategyListener does… https://symfony.com/blog/cve-2023-46733-possible-session-fixation?utm_source=Symfony%20Blog%20Feed&utm_medium=feed

Created 6mo | Nov 10, 2023, 4:50:17 PM


Login to add comment

Other posts in this group

SymfonyLive Berlin 2024: Last days to enjoy the late registration rate!

Get ready for the exciting SymfonyLive Berlin 2024 conference taking place on June 20 and 21 at Cinema Cubix AlexanderPlatz, Berlin.

Last days to register!

Next Wednesday, May 15th, is the la

May 13, 2024, 2:40:14 PM | Symfony
New in Symfony 7.1: Improved Access Token Authenticator

In Symfony 6.2 we introduced an Access Token Authenticator capable of fetching RFC6750 compliant tokens and retrieving the associated user identifier. Symfony 7.1 enhances this feature with several ne

May 13, 2024, 10:10:13 AM | Symfony
A Week of Symfony #906 (6-12 May 2024)

This week, Symfony continued tweaking and polishing the new features of Symfony 7.1, which will be released at the end of May 2024. Meanwhile, we published some blog posts showcasing Symfony 7.1 featu

May 12, 2024, 11:20:36 AM | Symfony
SymfonyLive Berlin 2024: Cancellation of workshops

SymfonyLive Berlin 2024 is just around the corner and will start on June 20-21. Get ready for the impressive lineup of speakers and topics. Visit here to more details and don't miss out on this

May 10, 2024, 2:20:16 PM | Symfony
New in Symfony 7.1: WebProfiler Improvements

Contributed by Javier Eguiluz in #54420,

54423

        and #53885.

The Symfony profiler

May 10, 2024, 9:40:13 AM | Symfony
New in Symfony 7.1: MapUploadedFile Attribute

Contributed by Renê Lima in #49978.

In Symfony 6.3 we introduced a way to map Request data to typed obje

May 9, 2024, 8:40:10 AM | Symfony
New in Symfony 7.1: MacAddress and Charset Constraints

Symfony provides tens of validation constraints to perform any kind of validation on your data. In Symfony 7.1 we're expanding that list with two new constraints.

MacAddress Constraint

May 8, 2024, 9:50:12 AM | Symfony