Mtons Mblog Brute Force Vulnerability in Password Management Endpoint

A vulnerability exists in Mtons Mblog versions up to 3.5.0, specifically in the '/settings/password' file. This issue allows for excessive authentication attempts due to a lack of rate limiting and CAPTCHA protection, creating a brute force attack vector for password enumeration. Once a password is successfully guessed, it can be immediately changed to a new one.

Impact

Exploitation of this vulnerability allows for password enumeration and unauthorized password changes, potentially leading to account takeover.

Reproduction

To reproduce this vulnerability, access the '/settings/password' endpoint. The absence of rate limiting and CAPTCHA will allow multiple password attempts in quick succession. After successfully guessing a password, it can be changed to a new one, effectively taking over the account.