No protection against brute-force attacks on login page

概要

参考情報

• kiwitcms/Kiwi security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2023-25156 · ADVISORY
• kiwitcms/Kiwi commit 0ed213f · WEB
• kiwitcms/Kiwi · PACKAGE
• huntr.dev/bounties/2b1a9be9-45e9-490b-8de0-26a492e79795 · WEB
• kiwitcms.org/blog/kiwi-tcms-team/2023/02/15/kiwi-tcms-120 · WEB
• huntr.dev/bounties/2b1a9be9-45e9-490b-8de0-26a492e79795 · Permissions Required
• kiwitcms.org/blog/kiwi-tcms-team/2023/02/15/kiwi-tcms-120 · Release Notes
• pypi.org/project/kiwitcms · PACKAGE
• GitHub Advisory GHSA-7968-h4m4-ghm9 · ADVISORY

kiwitcms のその他の脆弱性

• CVE-2026-49292低 0.0Kiwi TCMS is an open source test management system. Prior to 16.0, the unauthenticated /init-db/ page handled by InitDBView in tcms/core/vie…
• CVE-2026-55630低 0.0Kiwi TCMS is an open source test management system. Prior to 16.1, TestCase.extra_link and TestPlan.extra_link accepted unsanitized user inp…
• CVE-2026-54724中 6.1Kiwi TCMS is an open source test management system. Prior to 16.1, the account confirmation endpoint accepted an unvalidated next parameter,…
• CVE-2023-36809中 5.4Kiwi TCMS, an open source test management system allows users to upload attachments to test plans, test cases, etc. Versions of Kiwi TCMS pr…
• CVE-2023-33977中 5.4Kiwi TCMS is an open source test management system for both manual and automated testing. Kiwi TCMS allows users to upload attachments to te…