MEDIUM5.3
GHSA-ph6g-6v8w-8p6m
Missing rate limit for password resets
Quick fix
GHSA-ph6g-6v8w-8p6m — concrete5/concrete5: upgrade to the fixed version with the command below.
composer require concrete5/concrete5:^9.1.0Details
Concrete CMS (previously concrete5) before 9.1 did not have a rate limit for password resets.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist/concrete5/concrete5
Introduced in:
0Fixed in: 9.1.0Fix
composer require concrete5/concrete5:^9.1.0