CVE-2013-5750
The login form in the FriendsOfSymfony FOSUserBundle bundle before 1.3.3 for Symfony allows remote attackers to cause a denial of service (CPU consumption) via a long password that triggers an expensive hash computation, as demonstrated by a PBKDF2 computation.
- Score
- CVSS 2.0 5.0 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2013-09-25
- Last modified
- 2024-09-16
- Weaknesses
- CWE-399
Affected products
References
- http://symfony.com/blog/cve-2013-5750-security-issue-in-fosuserbundle-login-form
