Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2021/07/26 9:19 p.m.81 views

Improper Restriction of Excessive Authentication Attempts in Argo API

As of v1.5.0, the Argo API does not implement anti-automation measures such as rate limiting, account lockouts, or other anti-bruteforce measures. Attackers can submit an unlimited number of authentication attempts without consequence. Specific Go Packages Affected...

7.5CVSS7.5AI score0.02157EPSS
SaveExploits1References9Affected Software1
OSV
OSV
added 2021/07/26 9:19 p.m.36 views

GHSA-XCQR-9H24-VRGW Improper Restriction of Excessive Authentication Attempts in Argo API

As of v1.5.0, the Argo API does not implement anti-automation measures such as rate limiting, account lockouts, or other anti-bruteforce measures. Attackers can submit an unlimited number of authentication attempts without consequence. Specific Go Packages Affected...

7.5CVSS7.6AI score0.02157EPSS
SaveExploits1References8
Rows per page
Query Builder