Security Vulnerability in FormLoginAuthenticator Could Lead to Improper Authentication Logic Handling or Denial of Service

CVE-2024-36611

What is CVE-2024-36611?

A flaw has been identified in the FormLoginAuthenticator component of Symfony v7.0.7, where the system inadequately handles empty input fields during login requests. This vulnerability can potentially lead to improper authentication logic execution and may allow for denial of service conditions. Although reported issues suggest vulnerabilities, the supplier has deemed this specific report as false, indicating that the reported risks may not pose a reality to the security of the component.

References