CVE-2026-105237

Source
https://cve.org/CVERecord?id=CVE-2026-105237
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-105237.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-105237
Published
2026-10-05T06:00:11Z
Modified
2026-10-20T12:07:56Z
Severity
  • 2.9 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
linlinjava litemall Login Endpoint AdminAuthController.java excessive authentication
Details

A vulnerability was detected in linlinjava litemall up to 1.8.0. This affects an unknown part of the file litemall-admin-api/src/main/java/org/linlinjava/litemall/admin/web/AdminAuthController.java of the component Login Endpoint. The manipulation results in improper restriction of excessive authentication attempts. The attack may be performed from remote. A high complexity level is associated with this attack. It is indicated that the exploitability is difficult. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Database specific
{
    "cna_assigner":  "VulDB",
    "cwe_ids":  [
        "CWE-307",
        "CWE-799"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/105xxx/CVE-2026-105237.json"
}
References

Affected packages

Git / github.com/linlinjava/litemall

Affected ranges

Type
GIT
Repo
https://github.com/linlinjava/litemall
Events
Database specific
Show details
{
    "extracted_events":  [
        {
            "introduced":  "1.0"
        },
        {
            "last_affected":  "1.0"
        },
        {
            "introduced":  "1.1"
        },
        {
            "last_affected":  "1.1"
        },
        {
            "introduced":  "1.2"
        },
        {
            "last_affected":  "1.2"
        },
        {
            "introduced":  "1.3"
        },
        {
            "last_affected":  "1.3"
        },
        {
            "introduced":  "1.4"
        },
        {
            "last_affected":  "1.4"
        },
        {
            "introduced":  "1.5"
        },
        {
            "last_affected":  "1.5"
        },
        {
            "introduced":  "1.6"
        },
        {
            "last_affected":  "1.6"
        },
        {
            "introduced":  "1.7"
        },
        {
            "last_affected":  "1.7"
        },
        {
            "introduced":  "1.8.0"
        },
        {
            "last_affected":  "1.8.0"
        },
        {
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "last_affected":  "1.8.0"
                }
            ],
            "source":  "DESCRIPTION"
        }
    ],
    "source":  "AFFECTED_FIELD"
}

Affected versions

1.*
1.0
1.1
1.2
1.3
1.4
1.5
1.6
1.7
1.8.0
v1.*
v1.0.0
v1.1.0
v1.3.0
v1.4.0
v1.5.0
v1.6.0
v1.6.1
v1.7.0
v1.8.0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-105237.json"