Skip to content
OpenAdvisories

Package · RubyGems

sorcery

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.3
    CVE-2020-11052

    Improper Restriction of Excessive Authentication Attempts in Sorcery

    In Sorcery before 0.15.0, there is a brute force vulnerability when using password authentication via Sorcery. The brute force protection submodule will prevent a brute force attack for the defined lockout period, but once expired, protection will not be re-e…

    Sorcery Sorcery sorcery RubyGems