GitHub Advisoryadvisory · PyPI

GHSA-7j9h-3jxf-3vrf Denial of service vulnerability on Password reset page

HIGH Published 2023-02-15 Modified 2023-02-15 Official page ↗
Aliases
CVE-2023-25171
Ecosystem
PyPI
Packages
kiwitcms
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-770
Reviewed
2023-02-15

Affected packages

• PyPI kiwitcms: < 12.0 → fixed in 12.0

Description

Impact Previous versions of Kiwi TCMS do not impose rate limits which makes it easier to attempt denial-of-service attacks against the Password reset page. An attacker could potentially send a large number of emails if they know the email addresses of users in Kiwi TCMS. Additionally that may strain SMTP resources. Patches Users should upgrade to v12.0 or later. Workarounds Users may install and configure a rate-limiting proxy in front of Kiwi TCMS such as Nginx and/or configure rate limits on their email server when possible. References Disclosed by Ahmed Rabeaa Mosaa

Related

Alias · CVE (1)

  • CVE-2023-25171 Kiwi TCMS, an open source test management system, does not impose rate limits in versions prior to 12.0. vulnerability

Weakness · CWE (1)

  • CWE-770 Allocation of Resources Without Limits or Throttling weakness

References