~ / search / GHSA-772m-773g-qmhc

GHSA-772m-773g-qmhc

Missing rate limit in MaysWind ezBookkeeping

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-57603

Packages

EcosystemPackageAffectedFixed in
Go github.com/mayswind/ezbookkeeping <= 0.7.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the lack of rate limiting.

References

External links from the advisory. They lead to third-party sites.