CVE-2013-5750

Summary

The login form in the FriendsOfSymfony FOSUserBundle bundle before 1.3.3 for Symfony allows remote attackers to cause a denial of service (CPU consumption) via a long password that triggers an expensive hash computation, as demonstrated by a PBKDF2 computation.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://symfony.com/blog/cve-2013-5750-security-issue-in-fosuserbundle-login-form

References

• http://symfony.com/blog/cve-2013-5750-security-issue-in-fosuserbundle-login-form

• ←Previous
• Next→