CVE-2023-1539

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Improper Restriction of Excessive Authentication Attempts in GitHub repository answerdev/answer prior to 1.0.6.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-307

Affected software

VendorProductVersions
answerdevanswerdev/answer>= unspecified, < 1.0.6

References

Timeline

Published
Mar 21, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-15405.3Observable Response Discrepancy in GitHub repository answerdev/answer prior to 1.0.6.CVE-2023-15413.8Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6.CVE-2023-15425.4Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6.CVE-2023-15438.8Insufficient Session Expiration in GitHub repository answerdev/answer prior to 1.0.6.CVE-2023-15446.3A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to allocate and iniCVE-2023-15457.5SQL Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23.CVE-2023-15466.1The MyCryptoCheckout WordPress plugin before 2.124 does not escape some URLs before outputting them in attributes, leading to Reflected CrosCVE-2023-15479.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Elra Parkmatik allows SQL Injection thCVE-2023-15485.5A CWE-269: Improper Privilege Management vulnerability exists that could cause a local user to perform a denial of service through the consoCVE-2023-15497.2The Ad Inserter WordPress plugin before 2.7.27 unserializes user input provided via the settings, which could allow high privilege users sucCVE-2023-15505.5Insertion of Sensitive Information into log file vulnerability in NGINX Agent. NGINX Agent version 2.0 before 2.23.3 inserts sensitive inforCVE-2023-15527.8ToolboxST prior to version 7.10 is affected by a deserialization vulnerability. An attacker with local access to an HMI or who has conducted
CVE-2023-1539: Medium severity, CVSS 5.3 | Vulnix