CVE-2024-57610 Denial of service in n/a
Remote attackers can perform unrestricted brute-force attacks on Sylius user accounts, risking account compromise and service disruption due to missing rate limiting.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-57610?
CVE-2024-57610 is a high-severity denial of service vulnerability in n/a, published on 6 Feb 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A rate limiting issue in Sylius v2.0.2 allows a remote attacker to perform unrestricted brute-force attacks on user accounts, significantly increasing the risk of account compromise and denial of service for legitimate users. The Supplier's position is that the Sylius core software is not intended to address brute-force attacks; instead, customers deploying a Sylius-based system are supposed to use "firewalls, rate-limiting middleware, or authentication providers" for that functionality.
Weakness: CWE-307
Which versions are affected by CVE-2024-57610?
It affects 1 product.
Products include Sylius Sylius.
How do I fix CVE-2024-57610?
No fix has been published for CVE-2024-57610 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2024-57610 being exploited?
There is no known exploitation of CVE-2024-57610 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Other vulnerabilities in n/a
- CVE-2026-31824 Sylius has a Promotion Usage Limit Bypass via Race Condition
- CVE-2026-31820 Sylius affected by IDOR in Cart and Checkout LiveComponents
- CVE-2022-24743 Insufficient Session Expiration in Sylius
- CVE-2026-31819 Sylius has an Open Redirect via Referer Header
- CVE-2026-31821 Sylius is Missing Authorization in API v2 Add Item Endpoint