Unauthorized Access to Elevated Privileges via Excessive Authentication Attempts in GroupMe

CVE-2024-38176

What is CVE-2024-38176?

In GroupMe, an improper restriction of excessive authentication attempts enables an unauthenticated attacker to initiate a privilege escalation attack over the network. This vulnerability poses significant risks to user data and system integrity, allowing malicious actors to exploit security weaknesses within the application.

References