CVE-2022-3945 - Improper Restriction of Excessive Authentication Attempts in kareadita/kavita

MEDIUM

Improper Restriction of Excessive Authentication Attempts in kareadita/kavita

Published Nov 11, 2022

5.3

MEDIUM

CVSS 3.1

EPSS 0.99%

Improper Restriction of Excessive Authentication Attempts in GitHub repository kareadita/kavita prior to 0.6.0.3.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
unspecified	affected	<0.6.0.3

No remediation recorded yet.

Weaknesses (1)

CWE-307

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-43279		Advisory
https://github.com/kareadita/kavita/commit/f8db37d3f9aa42d47e7c4f4ca839e892d3f97afb		PatchThird Party Advisory
https://huntr.dev/bounties/55cd91b3-1d94-4d34-8d7f-86660b41fd65		ExploitPatchThird Party Advisory