We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
In Symfony v7.07, a security vulnerability was identified in the FormLoginAuthenticator component, where it failed to adequately handle cases where the username or password field of a login request is empty. This flaw could lead to various security risks, including improper authentication logic handling or denial of service. NOTE: the Supplier has concluded that this is a false report.
Reserved 2024-05-30 | Published 2024-11-29 | Updated 2024-12-03 | Assigner mitregithub.com/...ommit/a804ca15fcad279d7727b91d12a667fd5b925995
github.com/.../Http/Authenticator/FormLoginAuthenticator.php
gist.github.com/1047524396/3581425e0911b716cf8ce4fa30e41e6c
github.com/github/advisory-database/pull/5046
github.com/symfony/symfony/issues/59077
Support options
