| Package | Affected versions | Patched versions |
|---|---|---|
| blogin | ≤ 2024-11-09 |
An issue was discovered in weijiang1994 university-bbs (aka Blogin) in commit 9e06bab430bfc729f27b4284ba7570db3b11ce84 (2025-01-13). A weak verification code generation mechanism combined with missing rate limiting allows attackers to perform brute-force attacks on verification codes without authentication. Successful exploitation may result in account takeover via password reset or other authentication bypass methods.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free