CVE-2024-57610 PoC — Sylius 安全漏洞

Description

Lack of Rate Limiting in Sylius v2.0.2

介绍

# Lack of Rate Limiting in Sylius v2.0.2

Vendor Homepage: https://sylius.com/
### **Steps to Reproduce**
1.Navigate to https://store.sylius.com/login

2.Attempt multiple login requests using automated tools or scripts (e.g., Burp Suite, cURL).

3.Observe that no rate limiting is applied, and requests are processed without restriction.

## Poc video
https://drive.google.com/file/d/1o5nd8eStt0tgBpKJHUay02N_HVAUntPM/view
## Image
![alt text](https://imgur.com/9G9Skz7.png)

文件快照

备注