CVE-2025-52392 Details

A brute-force login vulnerability has been identified in Soosyze CMS version 2.0. The issue arises in the '/user/login' authentication endpoint, where the absence of rate limiting and account lockout mechanisms allows attackers to repeatedly submit login attempts. This vulnerability can be exploited by sending automated POST requests with a known username or email and a list of passwords, potentially leading to unauthorized access, especially to administrative accounts.

It is recommended to implement server-side rate limiting, such as restricting failed login attempts to a maximum of five per minute per IP address. Temporary account lockouts after multiple failed attempts, the introduction of CAPTCHA or other bot-mitigation measures, and logging and monitoring of repeated failed authentication attempts are also advisable.