| Package | Affected versions | Patched versions |
|---|---|---|
| preferred providers | = 1.7.0 | |
| backports sle | = 15.0 |
A missing rate limit in the Preferred Providers app 1.7.0 allowed an attacker to set the password an uncontrolled amount of times.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free