Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

friendsofsymfony/fosuserbundle

              master @ 685bdc1
            

Fixes

CVEs

CRITICAL

Peak severity

Highlights

Auth Bypass: 25 prior fixes. Scrutinize any change in this area.

Auth.php: most-fixed (7 issues). Treat as high-risk during review.

19 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: User sessions were refreshed by username rather than their immutable, unique database ID, or without class-compatibility verification. This allowed account takeover or session cross-contamination if a user changed their username or switched firewalls.

Denial of Service: Lack of character limits on password input fields exposed the bcrypt/hashing algorithms to severe CPU exhaustion, allowing remote attackers to trigger denial of service via long password strings (CVE-2013-5750).

Cryptographic Issues: Generation of confirmation and reset tokens previously relied on insecure random fallbacks (uniqid/mt_rand) and precision-losing functions like base_convert, resulting in highly predictable values.