CVE-2023-37635

Name of the Vulnerable Software and Affected Versions UVDesk Community Skeleton version 1.1.1

Description The issue allows unauthenticated attackers to perform brute force attacks on the login page to gain access to the application. This can be done through the login page, allowing attackers to potentially gain unauthorized access.

Recommendations For UVDesk Community Skeleton version 1.1.1, consider implementing rate limiting or IP blocking on the login page to prevent brute force attacks until a patch is available. As a temporary workaround, restrict access to the login page to minimize the risk of exploitation.