5
CVSSv2

CVE-2013-5750

Published: 25/09/2013 Updated: 15/10/2013
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

The login form in the FriendsOfSymfony FOSUserBundle bundle prior to 1.3.3 for Symfony allows remote malicious users to cause a denial of service (CPU consumption) via a long password that triggers an expensive hash computation, as demonstrated by a PBKDF2 computation.

Most Upvoted Vulmon Research Post

There is no Researcher post for this vulnerability
Would you like to share something about it? Sign up now to share your knowledge with the community.
Vulnerable Product Search on Vulmon Subscribe to Product

friends of symfony project fosuserbundle 1.2.4

friends of symfony project fosuserbundle 1.2.3

friends of symfony project fosuserbundle 1.2.1

friends of symfony project fosuserbundle 1.2.0

friends of symfony project fosuserbundle 1.3.1

friends of symfony project fosuserbundle 1.2.5

friends of symfony project fosuserbundle 1.1.0

friends of symfony project fosuserbundle

friends of symfony project fosuserbundle 1.3.0

friends of symfony project fosuserbundle 1.0.0