CVE-2022-2368

creationtimestamp| type| source ---|---|--- 2022-07-11 12:19:02+00:00| seen| https://t.me/cibsecurity/45894...

CVE-2022-2368 Authentication Bypass by Spoofing in microweber/microweber

Authentication Bypass by Spoofing in GitHub repository microweber/microweber prior to 1.2.20...

CVE-2022-2368

CVE-2022-2368 affects microweber/microweber prior to 1.2.20. The issue is an authentication bypass by spoofing: the login API blocks an IP after more than 5 failed attempts, but this can be bypassed by manipulating the X-Forwarded-For header, enabling password brute-force attempts. Public sources...