Lucene search

@huntrdevCVE-2023-2531

HistoryMay 05, 2023 - 1:15 a.m.

CVE-2023-2531

2023-05-0501:15:08

CWE-307

@huntrdev

web.nvd.nist.gov

cve-2023-2531

excessive authentication attempts

github repository

azuracast

nvd

security vulnerability

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.3

Confidence

High

EPSS

0.001

Percentile

48.8%

JSON

Improper Restriction of Excessive Authentication Attempts in GitHub repository azuracast/azuracast prior to 0.18.3.

Affected configurations

Nvd

Node

azuracastazuracastRange<0.18.3

VendorProductVersionCPE
azuracastazuracast*cpe:2.3:a:azuracast:azuracast:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
azuracast	azuracast	*	cpe:2.3:a:azuracast:azuracast::::::::

CNA Affected

[
  {
    "vendor": "azuracast",
    "product": "azuracast/azuracast",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "0.18.3",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

References

github.com/azuracast/azuracast/commit/bdb23594ad3e0c47c8568ce028a7c244a406cf9d

huntr.dev/bounties/20463eb2-0f9d-4ea3-a2c8-93f80e7aca02

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.3

Confidence

High

EPSS

0.001

Percentile

48.8%

JSON

Related for CVE-2023-2531