VYPR
Get started
← All advisories
High severityNVD Advisory· Published Jan 3, 2023· Updated Aug 6, 2024

sumocoders FrameworkUserBundle login.html.twig information exposure

CVE-2015-10012

Description

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in sumocoders FrameworkUserBundle up to 1.3.x. It has been rated as problematic. Affected by this issue is some unknown functionality of the file Resources/views/Security/login.html.twig. The manipulation leads to information exposure through error message. Upgrading to version 1.4.0 is able to address this issue. The name of the patch is abe4993390ba9bd7821ab12678270556645f94c8. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-217268. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
sumocoders/framework-user-bundlePackagist
< 1.4.01.4.0

Affected products

1

Patches

1
abe4993390ba

Make sure we don't get a doctrine error message.

https://github.com/sumocoders/FrameworkUserBundlewoutersioenJun 22, 2015via ghsa
commit
1 file changed · +1 −1
  • Resources/views/Security/login.html.twig+1 −1 modified
    @@ -13,7 +13,7 @@
 
         {% if error %}
             <div class="alert alert-info">
-                {{ error|trans }}
+                {{ error.messageKey|trans(error.messageData, 'security') }}
             </div>
         {% endif %}

Vulnerability mechanics

Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

6

News mentions

0

No linked articles in our index yet.