CVE-2013-5750

The login form in the FriendsOfSymfony FOSUserBundle bundle before 1.3.3 for Symfony allows remote attackers to cause a denial of service (CPU consumption) via a long password that triggers an expensive hash computation, as demonstrated by a PBKDF2 computation.

🔗 References (2)

• cve@mitrehttp://symfony.com/blog/cve-2013-5750-security-issue-in-fosuserbundle-login-form
• af854a3a-2127-422b-91ae-364da2661108http://symfony.com/blog/cve-2013-5750-security-issue-in-fosuserbundle-login-form