EPSS
Percentile
68.7%
symfony/symfony is vulnerable to cross-site request forgery (CSRF) token fixation attacks. The vulnerability exists due to the lack of invalidation of CSRF tokens when a user logs out.
github.com/symfony/symfony/commit/9e88eb5aa980e09f0f9ac691ebbe08d1baac0e0a
github.com/symfony/symfony/pull/24805
symfony.com/blog/cve-2018-11406-csrf-token-fixation