63moons vulnerabilities
We track 2 vulnerabilities in 63moons products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 4, 2024.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest 63moons vulnerabilities
- 7.5 High severity
Aero: Reliance on Untrusted Inputs in a Security Decision
This vulnerability exists in Aero due to improper implementation of OTP validation mechanism in certain API endpoints. An authenticated remote attacker could exploit this vulnerability by intercepting and manipulating the responses exchanged during the second
- 9.8 Critical severity
Wave 2.0: Improper Restriction of Excessive Authentication Attempts
This vulnerability exists in the Wave 2.0 due to missing restrictions for excessive failed authentication attempts on its API based login. A remote attacker could exploit this vulnerability by conducting a brute force attack against legitimate user OTP, MPIN o