Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Improper Restriction of Excessive Authentication Attempts in github.com/anyproto/anytype-heart
Vulnerability Description
Anytype Heart is the middleware library for Anytype. The challenge-based authentication for the local gRPC client API can be bypassed, allowing an attacker to gain access without the 4-digit code. This vulnerability is fixed in anytype-heart 0.48.4, anytype-cli 0.1.11, and Anytype Desktop 0.54.5.
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Vulnerability Type
过多认证尝试的限制不恰当
Vulnerability Title
Anytype Heart 安全漏洞
Vulnerability Description
Anytype Heart是Any Association开源的一个分布式客户端中间件库。 Anytype Heart存在安全漏洞，该漏洞源于基于挑战的身份验证可被绕过，可能导致未经授权访问。
CVSS Information
N/A
Vulnerability Type
N/A