GHSA-4m7v-wr6v-2mw5
AzuraCast missing brute force prevention
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | azuracast/azuracast | < 0.18.3 | 0.18.3 |
Details
As written in the advisory (Markdown source, shown as plain text).
The request rate limiting feature on the login page of AzuraCast before version 0.18.3 can be bypassed, which could allow an attacker to brute force login credentials.
References
External links from the advisory. They lead to third-party sites.