CVE-2022-29700

2022-04-2703:15:39

Google

osv.dev

zammad

password length

restriction

vulnerability

denial of service

software

AI Score

Confidence

High

EPSS

0.001

Percentile

38.4%

JSON

A lack of password length restriction in Zammad v5.1.0 allows for the creation of extremely long passwords which can cause a Denial of Service (DoS) during password verification.

References

zammad.com/en/advisories/zaa-2022-03