Nakama Security Vulnerabilities and Issues — Nakama CVE List

Lucene search

HeroiclabsNakama

2 matches found

CVE•added 2022/07/05 7:15 p.m.•61 views

CVE-2022-2321

Improper Restriction of Excessive Authentication Attempts in GitHub repository heroiclabs/nakama prior to 3.13.0. This results in login brute-force attacks.

9.8CVSS8.7AI score0.00303EPSS

CVE•added 2022/07/05 9:15 a.m.•50 views

CVE-2022-2306

Old session tokens can be used to authenticate to the application and send authenticated requests.

8.2CVSS7.5AI score0.00237EPSS