CVE-2022-2525

Improper Restriction of Excessive Authentication Attempts in GitHub repository janeczku/calibre-web prior to 0.6.20.

Score

CVSS 3.1 9.8 Critical

Status

Modified - security@huntr.dev

Published

2023-04-15

Last modified

2025-02-06

Weaknesses

CWE-307

Affected products

• Calibre-web (Janeczku)
• Janeczkucalibre-web (Janeczku)

References

• https://github.com/janeczku/calibre-web/commit/49e4f540c9b204c7e39b3c27ceadecd83ed60e7e
• https://huntr.dev/bounties/9ff87820-c14c-4454-9764-406496254ef0