CVE-2024-23565

Name of the Vulnerable Software and Affected Versions HCL Aftermarket EPC (affected versions not specified)

Description The application is susceptible to email flooding due to the absence of a proper mail limitation mechanism within the 'Forget Password' functionality. This flaw allows a human actor or an automated process, such as a bot or virus, to send an excessive volume of emails, which may lead to a denial of service or compromise the program logic.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.