Описание
bl-kernel/security.class.php in Bludit 3.9.2 allows attackers to bypass a brute-force protection mechanism by using many different forged X-Forwarded-For or Client-IP HTTP headers.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:bludit:bludit:3.9.2:*:*:*:*:*:*:*
EPSS
Процентиль: 99%
0.76412
Высокий
3.7 Low
CVSS3
9.8 Critical
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-307
Связанные уязвимости
CVSS3: 9.8
github
больше 3 лет назад
bl-kernel/security.class.php in Bludit 3.9.2 allows attackers to bypass a brute-force protection mechanism by using many different forged X-Forwarded-For or Client-IP HTTP headers.
EPSS
Процентиль: 99%
0.76412
Высокий
3.7 Low
CVSS3
9.8 Critical
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-307