Missing Rate Limiting in Web Applications operating on... · CVE-2021-42544 · GitHub Advisory Database · GitHub

Missing Rate Limiting in Web Applications operating on...

Critical severity Unreviewed Published Dec 1, 2021 to the GitHub Advisory Database • Updated Feb 1, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

Missing Rate Limiting in Web Applications operating on Business-DNA Solutions GmbHâ€™s TopEaseÂ® Platform Version <= 7.1.27 on the Login Form allows an unauthenticated remote attacker to perform multiple login attempts, which facilitates gaining privileges.

References

Published by the National Vulnerability Database

Nov 30, 2021

Published to the GitHub Advisory Database Dec 1, 2021

Last updated Feb 1, 2023