No Rate Limiting Vulnerability in CAP back office application

This vulnerability exists in the CAP back office application due to missing rate limiting on OTP requests in an API endpoint. An authenticated remote attacker could exploit this vulnerability by sending multiple OTP request through vulnerable API endpoint which could lead to the OTP bombing/flooding on the targeted system.

N/A

交互频率的控制不恰当

Rising Technosoft CAP back office application 安全漏洞

Rising Technosoft CAP back office application是印度Rising Technosoft公司的一个后台应用程序。 Rising Technosoft CAP back office application存在安全漏洞，该漏洞源于API端点缺少OTP请求速率限制，可能导致OTP轰炸或泛滥。

N/A

N/A