CVE-2022-34772

—

CVSS 3.1

8.8 high

EPSS

<1%p43

Published

Aug 22, 2022 (Aug 22, 2022)

Modified

Jun 17, 2026

Description

Tabit - password enumeration. Description: Tabit - password enumeration. The passwords for the Tabit system is a 4 digit OTP. One can resend OTP and try logging in indefinitely. Once again, this is an example of OWASP: API4 - Rate limiting.

Vendors: tabit
Products: tabit
Weakness: CWE-521
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.