Important Client Functionality at Risk Due to Improper Restriction of Excessive Authentication Attempts

CVE-2024-32720

5.3MEDIUM

Key Information

Vendor: Codepeople
Status: Appointment Hour Booking
Vendor: CVE Published:; 17 May 2024

Summary

Improper Restriction of Excessive Authentication Attempts vulnerability in CodePeople Appointment Hour Booking allows Removing Important Client Functionality.This issue affects Appointment Hour Booking: from n/a through 1.4.56.

Affected Version(s)

Appointment Hour Booking <= 1.4.56

CVSS V3.1

Score:

5.3

Severity:

MEDIUM

Confidentiality:

None

Integrity:

Low

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published.
May 17, 2024
Vulnerability Reserved.
Apr 17, 2024

Collectors

NVD DatabaseMitre Database

Credit

Mochamad Sofyan (Patchstack Alliance)