CVE-2022-37145

7.5 highEPSS 1.0%

High (7.5) in plextrac plextrac. EPSS 1.0% chance of exploitation in the next 30 days.

The PlexTrac platform prior to version 1.17.0 does not restrict excessive authentication attempts for accounts configured to use the PlexTrac authentication provider. An unauthenticated remote attacker could perform a bruteforce attack on the login page with no time or attempt limitation in an attempt to obtain valid credentials for the platform users configured to use the PlexTrac authentication provider.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 63% of CVEs (scores of 2026-10-31)
CWE: CWE-307
Published: 2022-09-08
Modified: 2026-07-09
Record from: the NVD, synced 2026-10-19

Affected

plextrac:plextrac

References

https://www.controlgap.com/blog/a-plextrac-story
https://www.controlgap.com/blog/a-plextrac-story

Check your stack JSON