CVE-2013-5750 | BDVDB-2026-57604 Detail

Description#

The login form in the FriendsOfSymfony FOSUserBundle bundle before 1.3.3 for Symfony allows remote attackers to cause a denial of service (CPU consumption) via a long password that triggers an expensive hash computation, as demonstrated by a PBKDF2 computation.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://symfony.com/blog/cve-2013-5750-security-issue-in-fosuserbundle-login-form

Exploit#

No public exploit known

History#

Version 12013-09-25Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.