CVE-2025-69246
Lack of bruteforce protection in Raytha CMS
Summary
Lack of bruteforce protection in Raytha CMS
Original description
The description as published by the source.
Raytha CMS does not have any brute force protection mechanism implemented. It allows an attacker to send multiple automated logon requests without triggering lockout, throttling, or step-up challenges.
This issue was fixed in version 1.4.6.
References
- advisory cert.pl
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web raytha.com