CVE-2018-11408: URL Redirection to Untrusted Site (Open Redirect)

June 13, 2018 (updated March 13, 2019)

The security handlers in the Security component in Symfony have an Open redirect vulnerability when security.http_utils is inlined by a container.

References

symfony.com/cve-2018-11408

Detect and mitigate CVE-2018-11408 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →