Brute Force Login Vulnerability in Soosyze CMS by Soosyze

CVE-2025-52392

What is CVE-2025-52392?

Soosyze CMS version 2.0 contains a significant security flaw that permits brute-force login attempts through its /user/login endpoint. This issue arises from the absence of effective rate-limiting and account lockout mechanisms, which leads to a situation where attackers can execute unlimited login attempts. If exploited, this vulnerability could allow unauthorized users to gain administrative access, compromising the integrity of the system. Site administrators are encouraged to implement additional security measures to mitigate the risk of such attacks.

References