Exploitation Summary
EIP tracks 1 public exploit for CVE-2020-27423. PoCs published by Mufaddal Masalawala.
AI-analyzed exploit summary This exploit describes a lack of rate limiting in the password reset functionality of Anuko Time Tracker, allowing an attacker to flood a user's mailbox with password reset emails, leading to a Denial of Service (DoS). The PoC outlines steps to replay the password reset request multiple times.
Description
Anuko Time Tracker v1.19.23.5311 lacks rate limit on the password reset module which allows attacker to perform Denial of Service attack on any legitimate user's mailbox
Exploits (1)
This exploit describes a lack of rate limiting in the password reset functionality of Anuko Time Tracker, allowing an attacker to flood a user's mailbox with password reset emails, leading to a Denial of Service (DoS). The PoC outlines steps to replay the password reset request multiple times.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H