CVE-2025-69246
Lack of bruteforce protection in Raytha CMS
概要
Lack of bruteforce protection in Raytha CMS
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Raytha CMS does not have any brute force protection mechanism implemented. It allows an attacker to send multiple automated logon requests without triggering lockout, throttling, or step-up challenges.
This issue was fixed in version 1.4.6.
参照URL
- advisory cert.pl
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web raytha.com