Vendor
smp46
5 known vulnerabilities.
Products
2 results · Clear filters · Feed
-
Medium 6.5
Pingvin Share X before 1.22.0 Ineffective Authentication Rate Limiting via Throttler TTL
Pingvin Share X before 1.22.0 contains an ineffective rate limiting vulnerability because throttler TTL values specified in seconds are interpreted as milliseconds. Unauthenticated attackers can send effectively unthrottled requests to /api/auth/signIn, /api/…
-
Medium 6.5
Pingvin Share X before 1.22.0 Rate Limit Bypass via Spoofed X-Forwarded-For
Pingvin Share X before 1.22.0 contains a rate limit bypass vulnerability that allows unauthenticated remote attackers to evade per-IP throttling because backend/src/main.ts unconditionally trusts proxy headers. Attackers can rotate spoofed X-Forwarded-For val…