CVE-2022-39315

Kirby is a Content Management System. Prior to versions 3.5.8.2, 3.6.6.2, 3.7.5.1, and 3.8.1, a user enumeration vulnerability affects all Kirby sites with user accounts unless Kirby's API and Panel are disabled in the config. It can only be exploited for targeted attacks because the attack does...

CVE-2022-39315 Kirby CMS vulnerable to user enumeration in the brute force protection

Kirby is a Content Management System. Prior to versions 3.5.8.2, 3.6.6.2, 3.7.5.1, and 3.8.1, a user enumeration vulnerability affects all Kirby sites with user accounts unless Kirby's API and Panel are disabled in the config. It can only be exploited for targeted attacks because the attack does...

CVE-2022-39315

CVE-2022-39315 — Kirby CMS : A user enumeration vulnerability affects Kirby sites with user accounts in versions prior to 3.5.8.2, 3.6.6.2, 3.7.5.1, and 3.8.1. The issue arises from the brute-force protection: Kirby did not insert a delay after the maximum attempts, enabling potential attackers t...