CVE-2020-28873: Fluxbb

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

Fluxbb 1.5.11 is affected by a denial of service (DoS) vulnerability by sending an extremely long password via the user login form. When a long password is sent, the password hashing process will result in CPU and memory exhaustion on the server.

Affected products

• Fluxbb Fluxbb: version 1.5.11 only

Published 2021-03-17. Last modified 2026-07-09.