CVE-2019-18886

An issue was discovered in Symfony 4.2.0 to 4.2.11 and 4.3.0 to 4.3.7

published November 21, 2019

CVSS
—
EPSS
2%
Percentile
74.9
In the wild
Unconfirmed
What it is

An issue was discovered in Symfony 4.2.0 to 4.2.11 and 4.3.0 to 4.3.7. The ability to enumerate users was possible due to different handling depending on whether the user existed when making unauthorized attempts to use the switch users functionality. This is related to symfony/security.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01552 · 74.9th percentile
Published
2019-11-21T17:41Z
EPSS history
Timeline
  • 21 NOV 17:41Z
    An issue was discovered in Symfony 4.2.0 to 4.2.11 and 4.3.0 to 4.3.7
    cvelistv5