CVE-2020-28873 | BDVDB-2026-150550 Detail

Description#

Fluxbb 1.5.11 is affected by a denial of service (DoS) vulnerability by sending an extremely long password via the user login form. When a long password is sent, the password hashing process will result in CPU and memory exhaustion on the server.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.acunetix.com/vulnerabilities/web/long-password-denial-of-service/#:~:text=By%20sending%20a%20very%20long%2Ca%20vulnerable%20password%20hashing%20implementation

Exploit#

No public exploit known

History#

Version 12021-03-17Record published in the CVE List.
Version 22026-07-09Most recent update recorded in the CVE List.