Back to feed
EUVD-2022-3415 · Published May 17, 2022
FriendsOfSymfony FOSUserBundle denial of service via login form The login form in the FriendsOfSymfony FOSUserBundle bundle before 1.3.3 for Symfony allows remote attackers to cause a denial of service (CPU consumption) via a long password that triggers an expensive hash computation, as demonstrated by a PBKDF2 computation.
Technologies
Friends_Of_Symfony_Project FosuserbundleFriendsofsymfony User-Bundle
Weaknesses
CWE-399CWE-400
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Impact
References
Potentially impacted assets
See if this affects your attack surface
