CVE-2024-48176
Lylme Spage v1.9.5 is vulnerable to Incorrect Access Control. There is no limit on the number of login attempts, and the verification code will not be refreshed after a failed l…
Published: 2024-11-05 · CVSS: 9.8 · CVSS 3.1
Lylme Spage v1.9.5 is vulnerable to Incorrect Access Control. There is no limit on the number of login attempts, and the verification code will not be refreshed after a failed login, which allows attackers to blast the username and password and log into the system backend.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7