Improper Restriction of Excessive Authentication Attempts in janeczku/calibre-web

CVE-2022-2525

Summary

A security flaw exists in Calibre-Web developed by Janeczku, where improper restrictions on excessive authentication attempts may allow unauthorized users to perform login attempts beyond intended limits. This vulnerability highlights a potential risk of brute force attacks, where an attacker could exploit this weakness to gain unauthorized access to user accounts, thereby compromising sensitive information and user privacy.

References