CVE-2018-11678

2018-06-0511:29:00

Google

osv.dev

9.6 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.1%

JSON

plugins/box/users/users.plugin.php in Monstra CMS 3.0.4 allows Login Rate Limiting Bypass via manipulation of the login_attempts cookie.

CPENameOperatorVersion
monstraeq2.2.0
monstraeq3.0.2
monstraeq2.3.1
monstraeq2.3.0
monstraeq3.0.4
monstraeq3.0.0
monstraeq3.0.3
monstraeq2.2.1
monstraeq3.0.1

Name	Operator	Version
monstra	eq	2.2.0
monstra	eq	3.0.2
monstra	eq	2.3.1
monstra	eq	2.3.0
monstra	eq	3.0.4
monstra	eq	3.0.0
monstra	eq	3.0.3
monstra	eq	2.2.1
monstra	eq	3.0.1

References

abdilahrf.github.io/login-rate-limiting-bypass