2 matches found
privacyIDEA Improper Input Validation vulnerability
privacyIDEA version 2.23.1 and earlier contains a Improper Input Validation vulnerability in token validation api that can result in Denial-of-Service. This attack appear to be exploitable via http request with user=&pass= to /validate/check url. This vulnerability appears to have been fixed in...
7.5CVSS7.5AI score0.01689EPSS
SaveExploits1References5Affected Software1
Input validation
privacyIDEA version 2.23.1 and earlier contains a Improper Input Validation vulnerability in token validation api that can result in Denial-of-Service. This attack appear to be exploitable via http request with user=&pass= to /validate/check url. This vulnerability appears to have been fixed in...
5CVSS7.5AI score0.01689EPSS
SaveExploits1References2Affected Software1
20