Denial Of Service (DoS)

2023-02-2201:38:32

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

denial of service

vulnerability

rate limits

application crash

password reset

email addresses

kiwi software

EPSS

0.001

Percentile

51.3%

JSON

kiwitcms is vulnerable to Denial Of Service (DoS). The vulnerability exists because the library does not impose rate limits in forms.py, allowing an attacker to cause an application crash through the password reset page by sending a large number of emails if they know the user email addresses in Kiwi.