CVE-2023-49810

Summary

CVE-2023-49810 is a vulnerability affecting the checkLoginAttempts functionality in the WWBN AVideo dev master commit 15fed957fb. This issue allows an attacker to bypass login attempt restrictions by crafting a specific HTTP request. Consequentially, the captcha verification process can be bypassed, enabling brute force attacks on user credentials. Despite the limitation set on login attempts, an attacker can send a series of manipulated requests to exploit this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.