Vulnerability GHSA-772m-773g-qmhc
Medium Risk
MEDIUM RISK
CVSS Score: 6.3
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
1 year ago
February 13, 2025 at 12:33 AM UTC
Missing rate limit in MaysWind ezBookkeeping
v0.1.0 - v0.7.0
v0.1.0 - v0.7.0
Summary
Missing rate limit in MaysWind ezBookkeeping
Details
An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the lack of rate limiting.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
7 hours ago
ezBookkeeping: Source-IP allowlist (MCP & API token) is bypassable via a spoofed `X-Forwarded-For` header
v0.10.0 - v1.5.1 GHSA-wchh-mrv2-5h4q
v0.10.0 - v1.5.1 GHSA-wchh-mrv2-5h4q
Unknown
1 year ago
Missing rate limit in MaysWind ezBookkeeping in github.com/mayswind/ezbookkeeping
v0.1.0 - v1.6.1 GO-2025-3466
v0.1.0 - v1.6.1 GO-2025-3466
Unknown
1 year ago
MaysWind ezBookkeeping has Improper Privilege Management in github.com/mayswind/ezbookkeeping
v0.1.0 - v1.6.1 GO-2025-3474
v0.1.0 - v1.6.1 GO-2025-3474
Critical
1 year ago
MaysWind ezBookkeeping has Improper Privilege Management
v0.1.0 - v0.7.0 GHSA-mpg8-8x9c-p9gv
v0.1.0 - v0.7.0 GHSA-mpg8-8x9c-p9gv
Impacted packages
Timeline
Published
1 year ago
February 13, 2025 at 12:33 AM UTC
Last Modified
1 year ago
March 03, 2025 at 07:41 PM UTC