Read the docs

Friends Of Symfony Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Friends Of Symfony Project records in CISA KEV

No Friends Of Symfony Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Fosuserbundle 1 record LOW

Records

1 record in Fosuserbundle · all components

TI-2013-04889 CVE-2013-5750 · GHSA-9mpf-g3fc-9rgv

The login form in the FriendsOfSymfony FOSUserBundle bundle before 1.3.3 for Symfony…

Priority LOW 25

The login form in the FriendsOfSymfony FOSUserBundle bundle before 1.3.3 for Symfony allows remote attackers to cause a denial of service (CPU consumption) via a long password that triggers an expensive hash computation,…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01232 Published 2013-09-25 Fixed in 1.2.5, 1.3.3 CWE-399
Open these records in search →