-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems directly from the token generation logic in TokenGenerator.php. The original implementation used base_convert(bin2hex(random_bytes)), which is mathematically lossy for large inputs (as PHP's base_convert cannot handle big integers precisely). This loss of entropy made tokens easier to predict. The patch replaced this with base64_encode (with URL-safe modifications), which preserves full entropy. The function generateToken() is explicitly modified in the commit diff, confirming it as the vulnerable entry point.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| friendsofsymfony/user-bundle | composer | >= 1.0.0, < 1.3.5 | 1.3.5 |
PHPPHPOngoing coverage of React2Shell