Brute Force Attacks
Microsoft.AspNetCore.Identity is vulnerable to brute force attacks. The application does not validate whether the lockout limit for incorrect login attempts has been reached, allowing a malicious user to be able to conduct a brute force attack...