exploitDog

CVE-2021-38725

Опубликовано: 09 сент. 2021

Источник: nvd

CVSS3: 5.3

CVSS2: 5

EPSS Низкий

Описание

Fuel CMS 1.5.0 has a brute force vulnerability in fuel/modules/fuel/controllers/Login.php

Ссылки

https://github.com/daylightstudio/FUEL-CMS/commit/15934fdd309408640d1f2be18f93a8beadaa5e9b
Patch
Third Party Advisory
https://github.com/daylightstudio/FUEL-CMS/issues/581
Issue Tracking
Third Party Advisory
https://github.com/daylightstudio/FUEL-CMS/commit/15934fdd309408640d1f2be18f93a8beadaa5e9b
Patch
Third Party Advisory
https://github.com/daylightstudio/FUEL-CMS/issues/581
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:thedaylightstudio:fuel_cms:1.5.0:*:*:*:*:*:*:*

EPSS

Процентиль: 39%

0.00172

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-307

Связанные уязвимости

GHSA-ff36-v98j-xr5x

github

больше 3 лет назад

Fuel CMS 1.5.0 has a brute force vulnerability in fuel/modules/fuel/controllers/Login.php

EPSS

Процентиль: 39%

0.00172

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-307