Bruteforce attack in login panel

How it was found

Your application does not limit login attempts done by a user because there is no ratelimiting at the panel that allows a malicious user to brute passwords