Vulnerability in Gforge

CVE-2005-2431

The (1) lost password and (2) account pending features in GForge 4.5 do not properly set a limit on the number of e-mails sent to an e-mail address, which allows remote attackers to send a large number of messages to arbitrary e-mail addresses (aka mail bomb).

EPSS: 0.013 (68.2th percentile) — read the EPSS interpretation.

Affected products

  • Gforge — versions 4.5
  • N/a — versions n/a

References