Vulnerabilities > Opencart > Critical

DATE CVE VULNERABILITY TITLE RISK
2023-09-12 CVE-2023-40834 Improper Restriction of Excessive Authentication Attempts vulnerability in Opencart 4.0.2.2
OpenCart CMS v4.0.2.2 was discovered to lack a protective mechanism on its login page against excessive login attempts, allowing unauthenticated attackers to gain access to the application via a brute force attack to the password parameter.
network
low complexity
opencart CWE-307
critical
9.8