Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The (1) lost password and (2) account pending features in GForge 4.5 do not properly set a limit on the number of e-mails sent to an e-mail address, which allows remote attackers to send a large number of messages to arbitrary e-mail addresses (aka mail bomb).
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Gforge 信息泄露漏洞
Vulnerability Description
GForge 4的忘记密码特性和帐户挂起特定性不能正确地限制发送到一个电子邮件地址的邮件数量。这使得远程攻击者可以向任意的电子邮件地址发送大量的信息(又名邮件炸弹)。
CVSS Information
N/A
Vulnerability Type
N/A