CyberRota Analysis
AI-GeneratedLaraDashboard versions prior to 1.4.8 are vulnerable to a race condition in the registration process, enabling unauthenticated attackers to bypass the daily registration limit per IP address. This flaw allows attackers to flood the system with concurrent registration requests, potentially creating multiple accounts and undermining anti-automation measures. Organizations using affected versions should prioritize this vulnerability to prevent abuse and maintain the integrity of their registration systems.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
LaraDashboard from 1.4.0 before 1.4.8 contains a race condition vulnerability in RegisterController::register that allows unauthenticated attackers to bypass the per-IP daily registration limit. Attackers can send many concurrent registration requests from one IP so all pass RegistrationGuardService::hasExceededIpLimit before recordRegistration runs, creating accounts in bulk and defeating anti-automation controls.