ID:7073 - Exploit for Improper control of interaction frequency in dolibarr - CVE-2020-7995

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to perform a brute-force attack.

The vulnerability exists due to the affected software lacks brute force protection in the "htdocs/index.php?mainmenu=home" login page. A remote attacker can launch a brute-force authentication attack in order to gain access to the system.

Remediation