CVE-2021-37934

Due to insufficient server-side login-attempt limit enforcement, a vulnerability in /account/login in Huntflow Enterprise before 3.10.14 could allow an unauthenticated, remote user to perform multiple login attempts for brute-force password guessing...

CVE-2021-37934

Huntflow Enterprise before 3.10.14 is affected by CVE-2021-37934 due to insufficient server-side login attempt limits on /account/login, allowing an unauthenticated remote user to perform multiple login attempts for brute-force password guessing. This vulnerability is documented across multiple s...