Vulnerabilities > CVE-2022-35488 - Unspecified vulnerability in Zammad 5.2.0
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
HIGH Summary
In Zammad 5.2.0, an attacker could manipulate the rate limiting in the 'forgot password' feature of Zammad, and thereby send many requests for a known account to cause Denial Of Service by many generated emails which would also spam the victim.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |