Sensiolabs: >> Symfony >> 2.3.16 Security Vulnerabilities
Session fixation vulnerability in the "Remember Me" login feature in Symfony 2.3.x before 2.3.35, 2.6.x before 2.6.12, and 2.7.x before 2.7.7 allows remote attackers to hijack web sessions via a session id.
CVSS Score
6.8
EPSS Score
0.002
Published
2015-12-07
Page 2