CVE-2023-28821
Concrete CMS (previously concrete5) before 9.1 did not have a rate limit for password resets.
Résumé
Missing rate limit for password resets
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Concrete CMS (previously concrete5) before 9.1 did not have a rate limit for password resets.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Packagist
concrete5/concrete5
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.0"}]}]
Références
- advisory nvd.nist.gov
- advisory concretecms.org
- advisory github.com
- package github.com