title: "CVE-2017-16653: CSRF protection does not use different tokens for HTTP and HTTPS"
link: https://symfony.com/cve-2017-16653
cve: CVE-2017-16653
branches:
2.7.x:
time: 2017-11-16 15:12:07
versions: ['>=2.7.0', '<2.7.38']
2.8.x:
time: 2017-11-16 15:20:19
versions: ['>=2.8.0', '<2.8.31']
3.0.x:
time: 2017-11-16 15:14:44
versions: ['>=3.0.0', '<3.1.0']
3.1.x:
time: 2017-11-16 15:14:44
versions: ['>=3.1.0', '<3.2.0']
3.2.x:
time: 2017-11-16 15:17:32
versions: ['>=3.2.0', '<3.2.14']
3.3.x:
time: 2017-11-16 15:24:32
versions: ['>=3.3.0', '<3.3.13']
reference: composer://symfony/security-csrf
|