Lucene search
GitHub Advisory DatabaseGHSA-9MPF-G3FC-9RGVHistoryMay 17, 2022 - 5:00 a.m.
FriendsOfSymfony FOSUserBundle denial of service via login form
2022-05-1705:00:37
CWE-400
GitHub Advisory Database
github.com
2
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.9 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
55.2%
The login form in the FriendsOfSymfony FOSUserBundle bundle before 1.3.3 for Symfony allows remote attackers to cause a denial of service (CPU consumption) via a long password that triggers an expensive hash computation, as demonstrated by a PBKDF2 computation.
Affected configurations
Node
friendsofsymfonyuser-bundleRange<1.3.3
ORfriendsofsymfonyuser-bundleRange<1.2.5
| CPE | Name | Operator | Version |
|---|---|---|---|
| friendsofsymfony/user-bundle | lt | 1.3.3 | |
| friendsofsymfony/user-bundle | lt | 1.2.5 |
Related
friendsofphp
friendsofphp
DOS attack in FOSUserBundle login form
2012-09-23 10:11:26
cve
cve
CVE-2013-5750
2022-10-03 16:14:55
CVE-2013-5958
2014-12-27 18:59:01
veracode
veracode
Denial Of Service (DoS)
2017-07-07 10:52:56
osv
osv
FriendsOfSymfony FOSUserBundle denial of service via login form
2022-05-17 05:00:37
Symfony Denial of Service Via Long Password Hashing
2022-05-17 04:19:02
cvelist
cvelist
CVE-2013-5750
2022-10-03 16:14:55
CVE-2013-5958
2014-12-27 18:00:00
prion
prion
Design/Logic Flaw
2013-09-25 10:31:00
Design/Logic Flaw
2014-12-27 18:59:00
nvd
nvd
CVE-2013-5750
2013-09-25 10:31:29
CVE-2013-5958
2014-12-27 18:59:01
symfony
symfony
CVE-2013-5750: Security issue in FOSUserBundle login form
2013-09-23 00:00:00
debiancve
debiancve
CVE-2013-5958
2014-12-27 18:59:01
github
github
Symfony Denial of Service Via Long Password Hashing
2022-05-17 04:19:02
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.9 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
55.2%
Related for GHSA-9MPF-G3FC-9RGV