SUSE CVE-2025-60538

A lack of rate limiting in the login page of shiori v1.7.4 and below allows attackers to bypass authentication via a brute force attack...

CVE-2025-60538

The shiori software (specifically the github.com/go-shiori/shiori package) is vulnerable to an authentication bypass due to a lack of rate limiting on its login page. This flaw allows an attacker to perform a brute force attack to gain unauthorized access. The issue affects shiori v1.7.4 and belo...