high7.3
CVE-2023-49810
WWBN AVideo Improper Restriction of Excessive Authentication Attempts vulnerability
Impact
A login attempt restriction bypass vulnerability exists in the checkLoginAttempts functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to captcha bypass, which can be abused by an attacker to bruteforce users credentials. An attacker can send a series of HTTP requests to trigger this vulnerability.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | wwbn/avideo | <= 12.4 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wwbn | Avideo | Version 15fed957fb |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://talosintelligence.com/vulnerability_reports/TALOS-2023-1898
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1898
- https://github.com/advisories/GHSA-v977-h4hm-rrff
- https://nvd.nist.gov/vuln/detail/CVE-2023-49810
- https://github.com/WWBN/AVideo/commit/15fed957fb64b4055158acfc449bd7974346edb5