{ "id": "CVE-2023-50455", "sourceIdentifier": "cve@mitre.org", "published": "2023-12-10T19:15:07.580", "lastModified": "2023-12-11T12:20:45.887", "vulnStatus": "Awaiting Analysis", "descriptions": [ { "lang": "en", "value": "An issue was discovered in Zammad before 6.2.0. Due to lack of rate limiting in the \"email address verification\" feature, an attacker could send many requests for a known address to cause Denial Of Service (generation of many emails, which would also spam the victim)." }, { "lang": "es", "value": "Se descubri\u00f3 un problema en Zammad antes de la versi\u00f3n 6.2.0. Debido a la falta de limitaci\u00f3n de velocidad en la funci\u00f3n \"verificaci\u00f3n de direcci\u00f3n de correo electr\u00f3nico\", un atacante podr\u00eda enviar muchas solicitudes a una direcci\u00f3n conocida para provocar una denegaci\u00f3n de servicio (generaci\u00f3n de muchos correos electr\u00f3nicos, que tambi\u00e9n enviar\u00edan spam a la v\u00edctima)." } ], "metrics": {}, "references": [ { "url": "https://zammad.com/en/advisories/zaa-2023-06", "source": "cve@mitre.org" } ] }