CyberRota Analysis
AI-GeneratedVictoriaMetrics versions up to 1.146.0 are vulnerable due to improper restriction of excessive authentication attempts in the VMAuth Authentication Endpoint, which could allow remote attackers to exploit this flaw. Although the attack complexity is high and exploitability is considered difficult, the public availability of the exploit necessitates prompt action. Organizations using affected versions should prioritize upgrading to version 1.147.0 to mitigate potential risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was found in VictoriaMetrics up to 1.146.0. Impacted is the function requestHandler of the file app/vmauth/main.go of the component VMAuth Authentication Endpoint. Performing a manipulation results in improper restriction of excessive authentication attempts. The attack is possible to be carried out remotely. The complexity of an attack is rather high. The exploitability is considered difficult. The exploit has been made public and could be used. Upgrading to version 1.147.0 is recommended to address this issue. The patch is named 119ba0fb5be8024d50c5ba946599b2e69e8803ea. Upgrading the affected component is recommended.