Brute Force Affecting netunicorn-library package, versions [,0.4.2)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk IDSNYK-PYTHON-NETUNICORNLIBRARY-8445844
published2 Dec 2024
disclosed1 Dec 2024
creditUnknown

Report a new vulnerability Found a mistake?

Introduced: 1 Dec 2024

CWE-307 (opens in a new tab)

How to fix?

Upgrade netunicorn-library to version 0.4.2 or higher.

Overview

netunicorn-library is a netunicorn contrib library

Affected versions of this package are vulnerable to Brute Force. An attacker could gain unauthorized access by exploiting this vulnerability.

References

CVSS Scores

version 4.0

version 3.1

Attack Vector (AV)
Network
Attack Complexity (AC)
High
Attack Requirements (AT)
None
Privileges Required (PR)
None
User Interaction (UI)
None

Confidentiality (VC)
Low
Integrity (VI)
Low
Availability (VA)
None

Confidentiality (SC)
None
Integrity (SI)
None
Availability (SA)
None