Threats tagged 'ghsa-2x75-qffm-gvv9'

Pingvin Share X versions before 1.22.0 have a vulnerability in their authentication rate limiting mechanism. The throttler's time-to-live (TTL) values are specified in seconds but incorrectly interpreted as milliseconds, allowing attackers to bypass rate limits. This flaw enables unauthenticated attackers to send a high volume of requests to authentication endpoints, facilitating brute-force attacks on passwords and TOTP codes.