疑似Oday
Detected a SmartMail admin password reset vulnerability by sending a POST request to the `/api/v1/auth/force-reset-password` endpoint, indicating that administrative password resets could potentially be triggered without proper authorization.
id: smartermail-password-reset
info:
name: SmarterTools SmarterMail - Admin Password Reset
auth
...