漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Press vulnerable to email flooding to users due to lack of validation and rate limits
Vulnerability Description
Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace, and software-as-a-service (SaaS). A bad actor can flood the inbox of a user by repeatedly sending invites (duplicate). The issue is fixed in commit 83c3fc7676c5dbbe1fd5092d21d95a10c7b48615.
CVSS Information
N/A
Vulnerability Type
不加限制或调节的资源分配
Vulnerability Title
Press 安全漏洞
Vulnerability Description
Press是Frappe开源的一个运行 Frappe Cloud 的 Frappe 自定义应用程序。 Press存在安全漏洞,该漏洞源于攻击者可重复发送邀请导致用户收件箱被淹没。
CVSS Information
N/A
Vulnerability Type
N/A