Lucene search
Veracode Vulnerability DatabaseVERACODE:4551HistoryJul 07, 2017 - 10:52 a.m.
Denial Of Service (DoS)
2017-07-0710:52:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
2
0.002 Low
EPSS
Percentile
55.2%
FOSUserBundle is vulnerable to denial of service (DoS) attacks. A malicious user can pass a very long password to the application that will result in an expensive hash computation, causing the application to run out of resources and crash.
| CPE | Name | Operator | Version |
|---|---|---|---|
| nmalo/fos-user-bundle | le | 1.3.2 |
Related
friendsofphp
friendsofphp
DOS attack in FOSUserBundle login form
2012-09-23 10:11:26
cve
cve
CVE-2013-5750
2022-10-03 16:14:55
CVE-2013-5958
2014-12-27 18:59:01
osv
osv
FriendsOfSymfony FOSUserBundle denial of service via login form
2022-05-17 05:00:37
Symfony Denial of Service Via Long Password Hashing
2022-05-17 04:19:02
cvelist
cvelist
CVE-2013-5750
2022-10-03 16:14:55
CVE-2013-5958
2014-12-27 18:00:00
prion
prion
Design/Logic Flaw
2013-09-25 10:31:00
Design/Logic Flaw
2014-12-27 18:59:00
nvd
nvd
CVE-2013-5750
2013-09-25 10:31:29
CVE-2013-5958
2014-12-27 18:59:01
symfony
symfony
CVE-2013-5750: Security issue in FOSUserBundle login form
2013-09-23 00:00:00
github
github
FriendsOfSymfony FOSUserBundle denial of service via login form
2022-05-17 05:00:37
Symfony Denial of Service Via Long Password Hashing
2022-05-17 04:19:02
debiancve
debiancve
CVE-2013-5958
2014-12-27 18:59:01