In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, a vulnerability would allow an attacker to authenticate as a privileged user on sites with user registration and remember me login functionality enabled. This is related to symfony/security.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade symfony | May 7, 2019 | May 7, 2019 |
| Drupal | — | Upgrade to drupal version 8.5.1Upgrade to drupal version 8.6.1 | Apr 18, 2019 | Apr 18, 2019 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | May 16, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub