CVE-2020-28873

HIGH 7.5CVE-2020-28873 · Published 17/03/2021 · updated 09/07/2026

In short

CVE-2020-28873 is a HIGH (CVSS 7.5) vulnerability affecting fluxbb (fluxbb).
Chance of exploitation in the next 30 days (EPSS): 0.86%, higher than 58.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
fluxbb fluxbb	`= 1.5.11`	No fix yet

Description

Fluxbb 1.5.11 is affected by a denial of service (DoS) vulnerability by sending an extremely long password via the user login form. When a long password is sent, the password hashing process will result in CPU and memory exhaustion on the server.

References

acunetix.com/vulnerabilities/web/long-password-denial-of-service

More vulnerabilities in fluxbb

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free