Lucene search
Domiee139FF87820-C14C-4454-9764-406496254EF0HistoryJun 01, 2022 - 5:25 a.m.
Improper Restriction of Excessive Authentication Attempts in login feature
2022-06-0105:25:00
domiee13
www.huntr.dev
7
improper restriction
excessive authentication attempts
login feature
rate limiting
brute force attack
bug bounty
EPSS
0.002
Percentile
61.7%
Description
No rate limiting in login form leads to bruteforce attack
Steps to reproduce
1.Go to http://localhost:<port>/login
2.Login with wrong credentials
3.Capture POST request with Burp Suite and Send to Intruder
4.Create 100 null payloads and start attack
5.Noticed that all request return 200 status code
Related
github
github
Improper Restriction of Excessive Authentication Attempts in calibreweb
2023-04-15 15:30:15
veracode
veracode
Improper Authentication
2023-04-26 13:12:04
osv
osv
CVE-2022-2525
2023-04-15 13:15:44
Improper Restriction of Excessive Authentication Attempts in calibreweb
2023-04-15 15:30:15
nvd
nvd
CVE-2022-2525
2023-04-15 13:15:44
cvelist
cvelist
cve
cve
CVE-2022-2525
2023-04-15 13:15:44
prion
prion
Input validation
2023-04-15 13:15:00