CVE-2022-29701

Name of the Vulnerable Software and Affected Versions Zammad version 5.1.0

Description A lack of rate limiting in the 'forgot password' feature allows attackers to send an excessive amount of reset requests for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages.

Recommendations For Zammad version 5.1.0, consider implementing rate limiting on the 'forgot password' feature to prevent excessive reset requests until a patch is available. As a temporary workaround, restrict access to the 'forgot password' feature to minimize the risk of exploitation.