Skip to content
OpenAdvisories
Medium · 6.3 CVE-2024-57603 EUVD-2024-53640GHSA-772m-773g-qmhcGO-2025-3466

Missing rate limit in MaysWind ezBookkeeping

Published Feb 12, 2025 · Updated Feb 13, 2025 · Assigned by mitre

Description

An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the lack of rate limiting.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
openSUSE Tumbleweed govulncheck-vulndb 0.0.20250312T181707-1.1 openSUSE-SU-2025:14889-1

Affected packages

EcosystemPackageAffectedFixedRecord
Go github.com/mayswind/ezbookkeeping <= 0.7.0 — GHSA-772m-773g-qmhc
Go github.com/mayswind/ezbookkeeping all versions — GO-2025-3466

Advisories 1

References