CVE-2022-3993

Improper Restriction of Excessive Authentication Attempts in GitHub repository kareadita/kavita prior to 0.6.0.3...

CVE-2022-3993

Improper Restriction of Excessive Authentication Attempts in GitHub repository kareadita/kavita prior to 0.6.0.3...

CVE-2022-3993

Kareadita/kavita prior to version 0.6.0.3 suffers from an Improper Restriction of Excessive Authentication Attempts. The connected Huntr entry documents a vulnerability at the migrate-email endpoint with no rate limiting, enabling brute‑force attempts on authentication parameters. Public disclosu...