CVE-2023-50455: High severity zammad vulnerability
An issue was discovered in Zammad before 6.2.0. Due to lack of rate limiting in the "email address verification" feature, an attacker could send many requests for a known address to cause Denial Of Service (generation of many emails, which would also spam the victim).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-50455?
The severity of CVE-2023-50455 is considered high due to its potential to cause Denial of Service.
How do I fix CVE-2023-50455?
To fix CVE-2023-50455, upgrade to Zammad version 6.2.0 or later which includes the necessary rate limiting.
Which versions are affected by CVE-2023-50455?
CVE-2023-50455 affects Zammad versions 6.1.0 and 6.1.0-alpha, as well as 6.2.0-alpha.
What attack vector does CVE-2023-50455 exploit?
CVE-2023-50455 exploits the 'email address verification' feature due to lack of rate limiting.
What impact does CVE-2023-50455 have on users?
CVE-2023-50455 can result in spamming users with excessive verification emails, leading to potential Denial of Service.