Lucene search
HistorySep 25, 2013 - 10:31 a.m.
CVE-2013-5750
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.5 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
55.2%
The login form in the FriendsOfSymfony FOSUserBundle bundle before 1.3.3 for Symfony allows remote attackers to cause a denial of service (CPU consumption) via a long password that triggers an expensive hash computation, as demonstrated by a PBKDF2 computation.
Affected configurations
Node
friends_of_symfony_projectfosuserbundleRange≤1.3.2---symfony
ORfriends_of_symfony_projectfosuserbundleMatch1.0.0---symfony
ORfriends_of_symfony_projectfosuserbundleMatch1.1.0---symfony
ORfriends_of_symfony_projectfosuserbundleMatch1.2.0---symfony
ORfriends_of_symfony_projectfosuserbundleMatch1.2.1---symfony
ORfriends_of_symfony_projectfosuserbundleMatch1.2.3---symfony
ORfriends_of_symfony_projectfosuserbundleMatch1.2.4---symfony
ORfriends_of_symfony_projectfosuserbundleMatch1.2.5---symfony
ORfriends_of_symfony_projectfosuserbundleMatch1.3.0---symfony
ORfriends_of_symfony_projectfosuserbundleMatch1.3.1---symfony
Related
friendsofphp
friendsofphp
DOS attack in FOSUserBundle login form
2012-09-23 10:11:26
cve
cve
CVE-2013-5750
2022-10-03 16:14:55
CVE-2013-5958
2014-12-27 18:59:01
osv
osv
FriendsOfSymfony FOSUserBundle denial of service via login form
2022-05-17 05:00:37
Symfony Denial of Service Via Long Password Hashing
2022-05-17 04:19:02
cvelist
cvelist
CVE-2013-5750
2022-10-03 16:14:55
CVE-2013-5958
2014-12-27 18:00:00
veracode
veracode
Denial Of Service (DoS)
2017-07-07 10:52:56
prion
prion
Design/Logic Flaw
2013-09-25 10:31:00
Design/Logic Flaw
2014-12-27 18:59:00
symfony
symfony
CVE-2013-5750: Security issue in FOSUserBundle login form
2013-09-23 00:00:00
github
github
FriendsOfSymfony FOSUserBundle denial of service via login form
2022-05-17 05:00:37
Symfony Denial of Service Via Long Password Hashing
2022-05-17 04:19:02
debiancve
debiancve
CVE-2013-5958
2014-12-27 18:59:01
nvd
nvd
CVE-2013-5958
2014-12-27 18:59:01
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.5 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
55.2%
Related for NVD:CVE-2013-5750