| title:     "CVE-2017-16653: CSRF protection does not use different tokens for HTTP and HTTPS"
link:      https://symfony.com/cve-2017-16653
cve:       CVE-2017-16653
branches:
    2.7.x:
        time:     2017-11-16 15:12:07
        versions: ['>=2.7.0', '<2.7.38']
    2.8.x:
        time:     2017-11-16 15:20:19
        versions: ['>=2.8.0', '<2.8.31']
    3.0.x:
        time:     2017-11-16 15:14:44
        versions: ['>=3.0.0', '<3.1.0']
    3.1.x:
        time:     2017-11-16 15:14:44
        versions: ['>=3.1.0', '<3.2.0']
    3.2.x:
        time:     2017-11-16 15:17:32
        versions: ['>=3.2.0', '<3.2.14']
    3.3.x:
        time:     2017-11-16 15:24:32
        versions: ['>=3.3.0', '<3.3.13']
reference: composer://symfony/security
 |