Lucene search
GoogleOSV:CVE-2021-33563HistoryMay 24, 2021 - 11:15 p.m.
CVE-2021-33563
2021-05-2423:15:08
Google
osv.dev
4
koel
login throttling
password strength
brute-force attacks
Koel before 5.1.4 lacks login throttling, lacks a password strength policy, and shows whether a failed login attempt had a valid username. This might make brute-force attacks easier.
Related
cve
cve
CVE-2021-33563
2021-05-24 23:15:08
CVE-2021-34064
2023-02-24 16:15:11
github
github
Improper rate limiting in Koel
2021-06-01 21:38:20
prion
prion
Default credentials
2021-05-24 23:15:00
nvd
nvd
CVE-2021-33563
2021-05-24 23:15:08
CVE-2021-34064
2023-02-24 16:15:11
veracode
veracode
Brute Force Attack
2021-05-27 05:55:24
osv
osv
Improper rate limiting in Koel
2021-06-01 21:38:20
cvelist
cvelist
CVE-2021-33563
2021-05-24 22:45:08