CVE-2024-43042

Description

Pluck CMS 4.7.18 does not restrict failed login attempts, allowing attackers to execute a brute force attack.

Affected Platforms

Weakness Type

CWE-307, CWE-307

References

• https://drive.google.com/file/d/1FnLCFP8xDrE1e_4Ft_TZ7VhC-JBkpsL0/view?usp=shari…
• https://github.com/pluck-cms/pluck