Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2024/05/15 9:42 p.m.14 views

FOSUserBundle Entropy is lost in the TokenGenerator

Description Because of the usage of baseconvert which looses precision for large inputs, the entropy of tokens generated by FOSUserBundle for the email confirmation and password resetting is lost. This makes these tokens much less random than they are expected to be, and so not cryptographically...

7.2AI score
SaveExploits0References4Affected Software1
Friends Of PHP
Friends Of PHP
added 2014/09/04 12:28 p.m.15 views

Entropy is lost in the TokenGenerator

More info at https://symfony.com/blog/fosuserbundle-entropy-of-generated-tokens-is-lost...

7.2AI score
SaveExploits0Affected Software1
Rows per page
Query Builder