An issue was discovered in Zammad before 6.2.0. Due to lack of rate limiting in the "email address verification" feature, an attacker could send many requests for a known address to cause Denial Of Service (generation of many emails, which would also spam the victim).
References
Link | Resource |
---|---|
https://zammad.com/en/advisories/zaa-2023-06 | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2023-12-10T00:00:00
Updated: 2023-12-10T18:49:13.949953
Reserved: 2023-12-10T00:00:00
Link: CVE-2023-50455
JSON object: View
NVD Information
Status : Analyzed
Published: 2023-12-10T19:15:07.580
Modified: 2023-12-13T18:03:08.230
Link: CVE-2023-50455
JSON object: View
Redhat Information
No data.
CWE