CVE-2023-2675

critical

Description

Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 2023.Q1.1223.

References

https://huntr.dev/bounties/474d3b39-1882-4d2c-b8f7-ff9f68f14cee

https://github.com/linagora/twake/commit/0770da3b184b5d5e71fee8251a5847a04c7cb9bc

Details

Source: Mitre, NVD

Published: 2023-11-07

Updated: 2023-11-13

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.00182