GitHub Advisoryadvisory · PyPI

GHSA-gr58-76rp-mmg4 wger vulnerable to brute force attempts

CRITICAL Published 2022-11-24 Modified 2022-11-30 Official page ↗

Aliases: CVE-2022-2650
Ecosystem: PyPI
Packages: wger
Severity: Critical
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-307
Reviewed: 2022-11-29

Affected packages

• PyPI wger: < 2.2 → fixed in 2.2

Description

Improper Restriction of Excessive Authentication Attempts in GitHub repository wger-project/wger prior to 2.2.

Related

Alias · CVE (1)

CVE-2022-2650 Improper Restriction of Excessive Authentication Attempts in GitHub repository wger-project/wger prior to 2.2. vulnerability

Weakness · CWE (1)

CWE-307 Improper Restriction of Excessive Authentication Attempts weakness

References