critical9.8
CVE-2023-2531
AzuraCast missing brute force prevention
Impact
The request rate limiting feature on the login page of AzuraCast before version 0.18.3 can be bypassed, which could allow an attacker to brute force login credentials.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | azuracast/azuracast | < 0.18.3 | 0.18.3 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Azuracast | Azuracast | before 0.18.3 |