Описание
A lack of rate limiting in the 'forgot password' feature of Zammad v5.1.0 allows attackers to send an excessive amount of reset requests for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages.
Ссылки
- PatchVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:zammad:zammad:5.1.0:*:*:*:*:*:*:*
EPSS
Процентиль: 63%
0.00457
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-770
Связанные уязвимости
CVSS3: 7.5
debian
почти 4 года назад
A lack of rate limiting in the 'forgot password' feature of Zammad v5. ...
CVSS3: 7.5
github
почти 4 года назад
A lack of rate limiting in the 'forgot password' feature of Zammad v5.1.0 allows attackers to send an excessive amount of reset requests for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages.
EPSS
Процентиль: 63%
0.00457
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-770