VYPR
← All advisories
High severity7.5NVD Advisory· Published Aug 8, 2022· Updated Jun 17, 2026

CVE-2022-35488

CVE-2022-35488

Description

In Zammad 5.2.0, an attacker could manipulate the rate limiting in the 'forgot password' feature of Zammad, and thereby send many requests for a known account to cause Denial Of Service by many generated emails which would also spam the victim.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Zammad/Zammad4 versions
    cpe:2.3:a:zammad:zammad:5.2.0:-:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:zammad:zammad:5.2.0:-:*:*:*:*:*:*
    • cpe:2.3:a:zammad:zammad:5.2.0:alpha:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: = 5.2.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.