CVE-2023-40834
OpenCart CMS v4.0.2.2 was discovered to lack a protective mechanism on its login page against excessive login attempts, allowing unauthenticated attac...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
OpenCart CMS v4.0.2.2 was discovered to lack a protective mechanism on its login page against excessive login attempts, allowing unauthenticated attackers to gain access to the application via a brute force attack to the password parameter.
Références
- advisory github.com
- advisory nvd.nist.gov
- web packetstormsecurity.com
- web opencart.com