Lucene search
+L

1 matches found

OSV
OSV
added 2025/08/13 3:30 p.m.43 views

GHSA-VQ9X-W82R-RHMC Soosyze CMS's /user/login endpoint missing rate-limiting and lockout mechanisms

Soosyze CMS 2.0 allows brute-force login attacks via the /user/login endpoint due to missing rate-limiting and lockout mechanisms. An attacker can repeatedly submit login attempts without restrictions, potentially gaining unauthorized administrative access. This vulnerability corresponds to...

8.7CVSS7.1AI score0.00861EPSS
SaveExploits3References5
Rows per page
Query Builder