Advisories for Composer/Symfony/Polyfill package

2014

Uncontrolled Resource Consumption

The Security component in Symfony allows remote attackers to cause a denial of service (CPU consumption) via a long password that triggers an expensive hash computation, as demonstrated by a PBKDF2 computation, a similar issue to CVE-2013-5750.