CVE-2025-60538

Publication date

2026-01-09 00:00:00

Family

mitre

State

PUBLISHED

Description

A lack of rate limiting in the login page of shiori v1.7.4 and below allows attackers to bypass authentication via a brute force attack.