First published: Thu Feb 20 2025(Updated: )
A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Car Park Booking System v3.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
PHPJabbers Car Park Booking System |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-51310 is considered a moderate severity vulnerability due to its potential to cause a Denial of Service (DoS) by spamming users with excessive emails.
To fix CVE-2023-51310, implement rate limiting on the 'Forgot Password' and 'Email Settings' features to restrict the number of requests a user can make in a given time frame.
The impact of CVE-2023-51310 can lead to service disruption for users, as legitimate users may receive overwhelming amounts of email, causing potential frustration and system resource strain.
Yes, CVE-2023-51310 can be exploited without authentication, allowing attackers to abuse the 'Forgot Password' and 'Email Settings' features indiscriminately.
CVE-2023-51310 affects PHPJabbers Car Park Booking System version 3.0.