Miggo Logo
Miggo Vulnerability Database
→
GHSA-9wg9-93h9-j8ch

GHSA-9wg9-93h9-j8ch: Auth0 Symfony SDK Vulnerable to Brute Force Authentication Tags of CookieStore Sessions

9.1

CVSS Score
3.1

Basic Information

CVE ID
-
GHSA ID
GHSA-9wg9-93h9-j8ch
EPSS Score
-
CWE
CWE-287
Published
5/17/2025
Updated
5/17/2025
KEV Status
No
Technology
TechnologyPHP

Technical Details

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Package NameEcosystemVulnerable VersionsFirst Patched Version
auth0/symfonycomposer< 5.4.05.4.0

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis:
In progress

WAF Protection Rules

WAF Rule

**Ov*rvi*w** S*ssion *ooki*s o* *ppli**tions usin* t** *ut** sym*ony S*K *on*i*ur** wit* *ooki*Stor* **v* *ut**nti**tion t**s t**t **n ** *rut* *or***, w*i** m*y r*sult in un*ut*oriz** ****ss. ***m I *****t**?** You *r* *****t** *y t*is vuln*r**ilit

Reasoning

No *n*lysis *v*il**l*