OpenCATS 0.10.0 Career Portal CareersUI.php processLogin applyToJobSubAction excessive authentication

Summaryinfo

A vulnerability was found in OpenCATS 0.10.0 and classified as problematic. Affected by this vulnerability is the function processLogin of the file modules/careers/CareersUI.php of the component Career Portal. Such manipulation of the argument applyToJobSubAction leads to excessive authentication. This vulnerability is documented as CVE-2026-111874. The attack can be executed remotely. Additionally, an exploit exists. A patch should be applied to remediate this issue. The project maintainer explains: "Candidates will now need to authenticate each time they access the Career Portal and successfully complete the CAPTCHA as part of that authentication flow. The authenticated candidate identity is now maintained server-side rather than relying on the previous persistent client-side cats…cw cookie mechanism. Application-level rate limiting is deliberately not in scope for this change. In my view, request throttling and brute-force protection of that kind are better applied at the network, reverse-proxy or web-server layer, where they can be configured appropriately for each deployment without OpenCATS having to implement and maintain its own rate-limiting framework. I'll update the online documentation to that effect."

Detailsinfo

A vulnerability was found in OpenCATS 0.10.0. It has been rated as problematic. Affected by this issue is the function processLogin of the file modules/careers/CareersUI.php of the component Career Portal. The manipulation of the argument applyToJobSubAction with an unknown input leads to a excessive authentication vulnerability. Using CWE to declare the problem leads to CWE-307. The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks. Impacted is confidentiality.

The advisory is available at github.com. This vulnerability is handled as CVE-2026-111874. The exploitation is known to be difficult. The attack may be launched remotely. No form of authentication is required for exploitation. Technical details as well as a public exploit are known. This vulnerability is assigned to T1110.001 by the MITRE ATT&CK project.

The exploit is available at gist.github.com. It is declared as proof-of-concept. The project maintainer explains: "Candidates will now need to authenticate each time they access the Career Portal and successfully complete the CAPTCHA as part of that authentication flow. The authenticated candidate identity is now maintained server-side rather than relying on the previous persistent client-side cats…cw cookie mechanism. Application-level rate limiting is deliberately not in scope for this change. In my view, request throttling and brute-force protection of that kind are better applied at the network, reverse-proxy or web-server layer, where they can be configured appropriately for each deployment without OpenCATS having to implement and maintain its own rate-limiting framework. I'll update the online documentation to that effect." By approaching the search of inurl:modules/careers/CareersUI.php it is possible to find vulnerable targets with Google Hacking.

Applying the patch 1cf4fa3ee9054314b023be79d404078645c22ade is able to eliminate this problem. The bugfix is ready for download at github.com.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Name

• OpenCATS

Version

• 0.10.0

License

• open-source

Website

• Product: https://github.com/opencats/OpenCATS/

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Submitinfo

Accepted

• Submit #1005051: opencats OpenCATS 0.10.0 (d5cf733f20d62b70dca1fcac23f64d6f2b021ff3) OpenCATS - Career Portal Candidate Login: Missing Rate Limiting (by hbynb)

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion