-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from the checkLoginAttempts() function's flawed state management. The function returns true on subsequent calls within the same request (via the $_checkLoginAttempts static variable) even when captcha validation should be required. This allows attackers to bypass login attempt restrictions by triggering multiple authentication checks in a single HTTP request, as demonstrated in the Talos proof-of-concept. The function's location in objects/user.php and its role in authentication flow are explicitly documented in the vulnerability reports.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| wwbn/avideo | composer | <= 12.4 |
PHPPHPOngoing coverage of React2Shell