GHSA-j6g5-p62x-58hw
GitHub Security Advisory
vantage6 lacks brute-force protection on change password functionality
✓ GitHub Reviewed
LOW
Has CVE
Advisory Details
### Impact
If attacker gets access to an authenticated session, they can try to brute-force the user password by using the change password functionality: they can call that route infinitely which will return the message that password is wrong until it is correct
### Patches
This issue has been patched in version 4.11.0
### Workarounds
None
Affected Packages
PyPI
vantage6
Affected versions:
0
(fixed in 4.11.0)
Related CVEs
Key Information
2.5
/10
Dataset
Last updated: June 15, 2025 6:24 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.