Vulnerability Details CVE-2023-50455
An issue was discovered in Zammad before 6.2.0. Due to lack of rate limiting in the "email address verification" feature, an attacker could send many requests for a known address to cause Denial Of Service (generation of many emails, which would also spam the victim).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 39.0%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2023-50455
-
cpe:2.3:a:zammad:zammad:6.1.0
-
cpe:2.3:a:zammad:zammad:6.2.0