Threats tagged 'ghsa-4vfm-59fx-r7h5'

A vulnerability in LogicalDOC Community Edition up to version 9.2.1 allows improper restriction of excessive authentication attempts on the /login.jsp admin login page. This flaw can be exploited remotely but requires high complexity and has difficult exploitability. The vulnerability has a low CVSS score of 3.7 and impacts confidentiality only. No vendor response or patch is currently available.