| Package | Affected versions | Patched versions |
|---|---|---|
| zammad | = 5.1.0 |
A lack of rate limiting in the 'forgot password' feature of Zammad v5.1.0 allows attackers to send an excessive amount of reset requests for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free