CVE-2026-111874 | CVSS: 3.7 | 严重级别: LOW
A flaw has been found in OpenCATS 0.10.0. Affected is the function processLogin of the file modules/careers/CareersUI.php of the component Career Portal. This manipulation of the argument applyToJobSubAction causes improper restriction of excessive authentication attempts. Remote exploitation of the attack is possible. A high degree of complexity is needed for the attack. The exploitability is told to be difficult. The exploit has been published and may be used. Patch name: 1cf4fa3ee9054314b023be79d404078645c22ade. It is suggested to install a patch to address this issue. The project maintaine
参考链接:
• https://gist.github.com/asdfghjkl12345678910111/851e7548613e4ae1b8b246edb2ca7c28
• https://github.com/opencats/OpenCATS/
• https://github.com/opencats/OpenCATS/commit/1cf4fa3ee9054314b023be79d404078645c2
📌 数据来源: NVD 官方