CVE-2022-34772: Tabit

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Tabit - password enumeration. Description: Tabit - password enumeration. The passwords for the Tabit system is a 4 digit OTP. One can resend OTP and try logging in indefinitely. Once again, this is an example of OWASP: API4 - Rate limiting.

Affected products

• Tabit Tabit: before 3.27.0 (fixed in 3.27.0)

Published 2022-08-22. Last modified 2026-06-17.