Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:39359
HistoryFeb 20, 2023 - 5:53 a.m.

Authentication Bypass

2023-02-2005:53:52
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
modoboa
authentication
bypass
vulnerability
api
throttling
unauthorized
user
brute-forcing
attacks
system

EPSS

0.028

Percentile

90.8%

modoboa is vulnerable to authentication bypass. The vulnerability exists due to lack of check conditions in the API throttling which allows an unauthorized user to perform brute-forcing attacks and gain access to the system.