Vulnerabilities > Authcrunch
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-02-17 | CVE-2024-21500 | Unspecified vulnerability in Authcrunch Caddy-Security All versions of the package github.com/greenpau/caddy-security are vulnerable to Improper Restriction of Excessive Authentication Attempts via the two-factor authentication (2FA). | 6.5 |
| 2024-02-12 | CVE-2023-52430 | Cross-site Scripting vulnerability in Authcrunch Caddy-Security 1.1.20 The caddy-security plugin 1.1.20 for Caddy allows reflected XSS via a GET request to a URL that contains an XSS payload and begins with either a /admin or /settings/mfa/delete/ substring. | 6.1 |