CVE-2022-3993

CRITICAL

Kavita < 0.6.0.3 - Brute Force

Title source: rule

Improper Restriction of Excessive Authentication Attempts in GitHub repository kareadita/kavita prior to 0.6.0.3.

Core 2

Core References

Patch, Third Party Advisory

Exploit, Patch, Third Party Advisory

CVSS v3 9.4

EPSS 0.0150

EPSS Percentile 81.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H

Vulnrichment

Exploitation poc

Automatable yes

Technical Impact total

CWE

CWE-307

Status published

Products (1)

kavitareader/kavita < 0.6.0.3

Published Nov 14, 2022

Tracked Since Feb 18, 2026