Improper Authentication

2023-04-2613:12:04

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

calibreweb web.py file bruteforcing software security vulnerability restrictions authentication takeover

EPSS

0.002

Percentile

61.7%

JSON

calibreweb is vulnerable to Improper Authentication. The vulnerability exists in the login function of web.py file, which allows a remote attacker to takeover the account by bruteforcing due to improper restriction of excessive authentication attempts.