VULNERABILITY INTELLIGENCE

CVE-2025-9004

CVSS score3.7 LOW
EPSS probability0.91%
CISA KEVNot currently listed
Published2025-08-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

A vulnerability was found in mtons mblog up to 3.5.0. This issue affects some unknown processing of the file /settings/password. The manipulation leads to improper restriction of excessive authentication attempts. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used.

Weakness classification

  • cna@vuldb.com: CWE-307

Primary references