4.8
Moyenne
CVE-2024-21500 All versions of the package github.com/greenpau/caddy-security are vulnerable to Improper Restriction of Excessive…
Description
All versions of the package github.com/greenpau/caddy-security are vulnerable to Improper Restriction of Excessive Authentication Attempts via the two-factor authentication (2FA). Although the application blocks the user after several failed attempts to provide 2FA codes, attackers can bypass this blocking mechanism by automating the application’s full multistep 2FA process.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| github.com/greenpau/caddy-security | Versions non publiées |
Références
- security.snyk.io security.snyk.io
- github.com github.com
- blog.trailofbits.com blog.trailofbits.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de github.com/greenpau/caddy-security
Les 9 CVE de github.com/greenpau/caddy-security →
CVE-2024-21493
All versions of the package github.com/greenpau/caddy-security are vulnerable to Improper Validation of Array Index when…
5.3
Moyenne
CVE-2024-21495
Versions of the package github.com/greenpau/caddy-security before 1.0.42 are vulnerable to Insecure Randomness due to…
6.5
Moyenne
CVE-2024-21494
All versions of the package github.com/greenpau/caddy-security are vulnerable to Authentication Bypass by Spoofing via…
5.4
Moyenne
CVE-2024-21499
All versions of the package github.com/greenpau/caddy-security are vulnerable to HTTP Header Injection via the…
4.3
Moyenne