Skip to content
Threat Feed
Subscribe

Vendor

Databasus

1 brief RSS
high advisory

Authentication Bypass in Databasus via Reset Password Brute-Forcing

An authentication bypass vulnerability in Databasus versions 3.7.0 through 3.61.0 allows unauthenticated attackers to brute-force six-digit password reset codes due to a lack of rate limiting.

Databasus credential-access authentication-bypass web-application-security
1t 1c