Threats tagged 'ghsa-v7j8-qp7g-hgm2'

A vulnerability in SiteServer SSCMS up to versions 7.1.3, 7.2.1, and 7.4.0 affects the LoginController.Submit function in the Admin-Login CAPTCHA component. The flaw involves improper restriction of excessive authentication attempts due to manipulation of the isForceLogoutAndLogin argument. This vulnerability can be exploited remotely but requires high attack complexity and is difficult to exploit. A patch identified by commit df3becb7ebb00a48435418a44fd08a459eb38ace is available to address the issue.