CVE-2024-48176

n/a / n/a PUBLISHED

Description (CNA)

Lylme Spage v1.9.5 is vulnerable to Incorrect Access Control. There is no limit on the number of login attempts, and the verification code will not be refreshed after a failed login, which allows attackers to blast the username and password and log into the system backend.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://gist.github.com/Gryffinbit/c0b37c6caae4844d4f59368e454d3e46

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.