GHSA-wvr4-w6cw-4px8CriticalCVSS 9.8
Craft CMS possibility of brute force attempts
🔗 CVE IDs covered (1)
📋 Description
In Craft CMS before 3.1.7, the elevated session password prompt was not being rate limited like normal login forms, leading to the possibility of a brute force attempt on them.
🎯 Affected products1
- composer/craftcms/cms:< 3.1.7