PT-2026-41122 · Tuist · Tuist
CVSS v4.0
6.9
Medium
| Vector | AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:L |
Name of the Vulnerable Software and Affected Versions
Tuist versions prior to 1.180.10
Description
The forgot password flow allows an unauthenticated attacker to repeatedly trigger password reset emails for a known account because there is no server-side throttling. In self-hosted deployments, this can be used to send large volumes of unwanted email and consume downstream email delivery resources.
Recommendations
Update to version 1.180.10.
Exploit
Fix
Allocation of Resources Without Limits
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Tuist