Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Veal98 Echo Open-Source Community System 2.2 thru 2.3 allowing an unauthenticated attacker to cause the server to send email verification messages to arbitrary users via the /sendEmailCodeForResetPwd endpoint potentially causing a denial of service to the server or the downstream users.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Echo 安全漏洞
Vulnerability Description
Echo是Veal98个人开发者的一套前后端不分离的开源社区系统。 Echo 2.2版本至2.3版本存在安全漏洞，该漏洞源于sendEmailCodeForResetPwd端点允许未经认证的攻击者发送验证邮件，可能导致拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A