CVE-2019-15929 is a critical vulnerability affecting Craft CMS through version 3.1.7, where the elevated session password prompt lacked rate limiting, enabling brute-force attacks. This flaw carries a CVSS score of 9.8, indicating a high potential for complete compromise of confidentiality, integrity, and availability, with low attack complexity and no user interaction required. While no active exploitation, public exploits, or Metasploit modules are currently reported, its critical severity warrants immediate patching. Community discussion and media coverage for this CVE are minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 3.1.7CPE matchmatch criteria | cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.