CWE-799 Improper Control of Interaction Frequency
Description
The product does not properly limit the number or frequency of interactions that it has with an actor, such as the number of incoming requests.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-799 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-wwfp-w96m-c6x8 | CVE-2026-41346 | MODERATE |
OpenClaw: Pairing pending-request caps were enforced per channel instead of per account |
2026-05-06 | |
| GHSA-qcc3-jqwp-5vh2 | CVE-2026-41343 | MODERATE |
OpenClaw: LINE webhook handler lacks shared pre-auth concurrency budget before signature verification |
2026-05-06 | |
| GHSA-6p8r-6m93-557f | CVE-2026-41333 | MODERATE |
OpenClaw: Fake DeviceToken Bypasses Shared Auth Rate Limiting |
2026-05-06 | |
| GHSA-w9f5-8q83-qwpx | - | MODERATE |
Duplicate Advisory: OpenClaw: Fake DeviceToken Bypasses Shared Auth Rate Limiting |
2026-05-04 | |
| GHSA-mf69-r24q-ghhr | - | MODERATE |
Duplicate Advisory: OpenClaw: Pairing pending-request caps were enforced per channel instead of per account |
2026-05-04 | |
| GHSA-2hv5-4h3g-4hjv | - | MODERATE |
Duplicate Advisory: OpenClaw: LINE webhook handler lacks shared pre-auth concurrency budget before signature verification |
2026-05-04 | |
| GHSA-775h-3xrc-c228 | CVE-2026-30972 | MODERATE |
Parse Server has a rate limit bypass via batch request endpoint |
2026-03-11 | |
| GHSA-6rmx-gvvg-vh6j | - | MODERATE |
OpenClaw's hooks count non-POST requests toward auth lockout |
2026-03-09 | |
| GHSA-qrf6-h5fc-7m96 | CVE-2016-11069 | HIGH |
Mattermost Server does not enforce rate limits on password change attempts |
2025-10-22 | |
| GHSA-fq34-xw6c-fphf | CVE-2025-57816 | MODERATE |
Fides Webserver API Rate Limiting Vulnerability in Proxied Environments |
2025-09-13 | |
| GHSA-4h9w-7vfp-px8m | CVE-2025-32378 | LOW | - |
Shopware default newsletter opt-in settings allow for mass sign-up abuse |
2025-09-10 |
| GHSA-772m-773g-qmhc | CVE-2024-57603 | MODERATE |
Missing rate limit in MaysWind ezBookkeeping |
2025-02-13 | |
| GHSA-63wg-87qv-rw4r | CVE-2024-13274 | MODERATE | - |
Drupal Open Social allows Functionality Misuse |
2025-01-14 |
| GHSA-9h9c-f287-c6vp | CVE-2018-17184 | MODERATE |
Improper Control of Interaction Frequency in Apache syncope-core |
2022-09-14 | |
| GHSA-r37h-j483-cjjm | CVE-2021-33563 | HIGH | - |
Improper rate limiting in Koel |
2021-06-04 |