PT-2025-11632
CVE-2025-25595
·
Published
2025-03-18
·
Updated
2025-03-19
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Safe App version a3.0.9
Description
A lack of rate limiting in the login page allows attackers to bypass authentication via a brute force attack.
Recommendations
For Safe App version a3.0.9, consider implementing rate limiting on the login page to prevent brute force attacks. As a temporary workaround, restrict access to the login page or implement additional authentication measures to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾