Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:31371
HistoryJul 26, 2021 - 8:25 a.m.

Insecure Authentication

2021-07-2608:25:47
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
firefly-iii
insecure authentication
excessive authentication attempts
brute forcing
vulnerability
software

EPSS

0.002

Percentile

57.4%

firefly-iii has insecure authentication. The vulnerability exists due to Improper Restriction of Excessive Authentication Attempts allowing an attacker to be able to gain access through brute forcing the login with a correct password list.

EPSS

0.002

Percentile

57.4%