| Package | Affected versions | Patched versions |
|---|---|---|
| azuracast/azuracast | < 0.18.3 | 0.18.3 |
| azuracast | < 0.18.3 | 0.18.3 |
The request rate limiting feature on the login page of AzuraCast before version 0.18.3 can be bypassed, which could allow an attacker to brute force login credentials.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free