CVE-2024-51557

Summary

CVE-2024-51557 is a vulnerability affecting the Wave 2.0 API. The issue arises due to insufficient rate limiting on One-Time Password (OTP) requests, creating an opportunity for an authenticated attacker to send excessive OTP requests through the vulnerable API endpoint. This may result in OTP bombing or flooding, potentially overwhelming the targeted system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.