Lucene search

K
cvelistMitreCVELIST:CVE-2013-5750
HistoryOct 03, 2022 - 4:14 p.m.

CVE-2013-5750

2022-10-0316:14:55
mitre
www.cve.org
cve-2013-5750
remote attack
denial of service
cpu consumption
long password
expensive hash computation
pbkdf2 computation
symfony
fosuserbundle

6.4 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.2%

The login form in the FriendsOfSymfony FOSUserBundle bundle before 1.3.3 for Symfony allows remote attackers to cause a denial of service (CPU consumption) via a long password that triggers an expensive hash computation, as demonstrated by a PBKDF2 computation.

6.4 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.2%