Skip to content
OpenAdvisories

Vendor

Sorcery

1 known vulnerabilities.

Products

Sorcery 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.3
    CVE-2020-11052

    Improper Restriction of Excessive Authentication Attempts in Sorcery

    In Sorcery before 0.15.0, there is a brute force vulnerability when using password authentication via Sorcery. The brute force protection submodule will prevent a brute force attack for the defined lockout period, but once expired, protection will not be re-e…

    Sorcery Sorcery sorcery RubyGems