CVE-2022-2321: Improper Restriction of Excessive Authentication Attempts

July 6, 2022 (updated July 15, 2022)

Improper Restriction of Excessive Authentication Attempts in GitHub repository heroiclabs/nakama prior to 3.13.0. This results in login brute-force attacks.

References

github.com/advisories/GHSA-8r94-4h3c-939f
github.com/heroiclabs/nakama/commit/e2e02fce80ff33ce45f8a6ebc0b7a99ee0b03824
github.com/heroiclabs/nakama/pull/878
huntr.dev/bounties/3055b3f5-6b80-4d47-8e00-3500dfb458bc
nvd.nist.gov/vuln/detail/CVE-2022-2321

Code Behaviors & Features

Detect and mitigate CVE-2022-2321 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →