CVE-2023-49810

Name of the Vulnerable Software and Affected Versions WWBN AVideo dev master commit 15fed957fb

Description A login attempt restriction bypass issue exists in the checkLoginAttempts functionality. This can be triggered by a specially crafted HTTP request, leading to captcha bypass. An attacker can exploit this to brute force user credentials by sending a series of HTTP requests.

Recommendations For WWBN AVideo dev master commit 15fed957fb, as a temporary workaround, consider disabling the checkLoginAttempts functionality until a patch is available. Restrict access to the login functionality to minimize the risk of exploitation. Avoid using the login feature in the affected version until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.