CVE-2026-122049: fallo de gravedad media en Campcodes Bitcoin Wallet System
Campcodes Bitcoin Wallet System ForgotPasswordController.php random_int excessive authentication
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
30Vexday Risk Score
Sin señal de explotación. Ella tiene prueba de concepto pública.
ssvc Attendcvss 6.3
A flaw has been found in Campcodes Bitcoin Wallet System 1.0. This affects the function random_int of the file core/app/Http/Controllers/Auth/ForgotPasswordController.php. This manipulation causes improper restriction of excessive authentication attempts. Remote exploitation of the attack is possible. The attack's complexity is rated as high. It is indicated that the exploitability is difficult. The exploit has been published and may be used.
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
Productos afectados
Campcodes · Bitcoin Wallet SystemPoCs públicas encontradas — 1
cve_referencetracexlabs.com/releases/campcodes-bitcoin-wallet-reset-code-flaws.htmlno verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.