CVE-2025-69246
Lack of bruteforce protection in Raytha CMS
Résumé
Lack of bruteforce protection in Raytha CMS
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Raytha CMS does not have any brute force protection mechanism implemented. It allows an attacker to send multiple automated logon requests without triggering lockout, throttling, or step-up challenges.
This issue was fixed in version 1.4.6.
Références
- advisory cert.pl
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web raytha.com