CVE-2024-48176

Summary

CVE-2024-48176 is a newly disclosed vulnerability affecting Lylme Spage version 1.9.5. This issue involves incorrect access control, allowing attackers to make an unlimited number of login attempts without the system refreshing the verification code after failure. As a result, attackers can brute force their way into the system backend. This flaw poses a significant threat, as successful exploitation could grant attackers full access to sensitive information and system functionalities. Users of Lylme Spage 1.9.5 are urged to upgrade to a patched version immediately to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.