Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-15929
9.8
CRITICALCVSS v3
Published
October 24, 2019
CVSS v2
5 MEDIUM
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
In Craft CMS through 3.1.7, the elevated session password prompt was not being rate limited like normal login forms, leading to the possibility of a brute force attempt on them.
GitHub