What is GHSA-7j9h-3jxf-3vrf?

GHSA-7j9h-3jxf-3vrf is a security advisory published by GitHub Security Advisories with High severity. Denial of service vulnerability on Password reset page

Which CVE IDs does GHSA-7j9h-3jxf-3vrf cover?

GHSA-7j9h-3jxf-3vrf covers the following CVE IDs: CVE-2023-25171. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-7j9h-3jxf-3vrf?

GHSA-7j9h-3jxf-3vrf has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-7j9h-3jxf-3vrf?

GHSA-7j9h-3jxf-3vrf affects 1 product, including: pip/kiwitcms:\u003c 12.0.

GHSA-7j9h-3jxf-3vrfHighCVSS 7.5

Denial of service vulnerability on Password reset page

Vendor

GitHub Security Advisories

Published

February 15, 2023

Last Modified

February 15, 2023

🔗 CVE IDs covered (1)

CVE-2023-25171 →

📋 Description

Impact

Previous versions of Kiwi TCMS do not impose rate limits which makes it easier to attempt denial-of-service attacks against the Password reset page. An attacker could potentially send a large number of emails if they know the email addresses of users in Kiwi TCMS. Additionally that may strain SMTP resources.

Patches

Users should upgrade to v12.0 or later.

Workarounds

Users may install and configure a rate-limiting proxy in front of Kiwi TCMS such as Nginx and/or configure rate limits on their email server when possible.

References

Disclosed by Ahmed Rabeaa Mosaa

🎯 Affected products1

pip/kiwitcms:< 12.0

🔗 References (6)

https://github.com/kiwitcms/Kiwi/security/advisories/GHSA-7j9h-3jxf-3vrf
https://nvd.nist.gov/vuln/detail/CVE-2023-25171
https://huntr.dev/bounties/3b712cb6-3fa3-4f71-8562-7a7016c6262e
https://kiwitcms.org/blog/kiwi-tcms-team/2023/02/15/kiwi-tcms-120/
https://github.com/kiwitcms/Kiwi/commit/761305d04f5910ba14cc04d1255a8f1afdbb87f3
https://github.com/advisories/GHSA-7j9h-3jxf-3vrf