CVE-2021-33563
CVE-2021-33563
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Koel before 5.1.4 lacks login throttling, lacks a password strength policy, and shows whether a failed login attempt had a valid username. This might make brute-force attacks easier.
EPSS 0.8% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
phanan/koel Packagist
- Versions
- 1.0.0-beta
- v0.0.0-beta
- v1.1.1
- v1.1.2
- v2.0.0
- v2.0.1
- v2.0.2
- v2.1.0
- v2.2.0
- v2.2.1
- v3.0.0
- v3.0.1
- v3.1.0
- v3.1.1
- v3.2.0
- v3.3.0
- v3.3.1
- v3.4.0
- v3.4.1
- v3.5.0
- v3.5.1
- v3.5.2
- v3.5.3
- v3.5.4
- v3.5.5
- v3.6.0
- v3.6.1
- v3.6.2
- v3.7.0
- v3.7.1
- v3.7.2
- v4.0.0
- v4.1.0
- v4.1.1
- v4.2.0
- v4.2.1
- v4.2.2
- v4.3.0
- v4.3.1
- v4.4.0
- v5.0.0
- v5.0.1
- v5.0.2
- v5.1.0
- v5.1.1
- v5.1.2
- v5.1.3
- Affected ranges
- ECOSYSTEM: < 5.1.4
Update to 5.1.4