Threats tagged 'ghsa-wmqf-q66j-3h4j'

A vulnerability in VictoriaMetrics up to version 1.146.0 affects the VMAuth Authentication Endpoint's requestHandler function. This flaw allows improper restriction of excessive authentication attempts, potentially enabling remote attackers to attempt authentication more times than intended. The attack complexity is high, and exploitation is difficult. A public exploit exists. Upgrading to version 1.147.0 addresses this issue.