high7.5Public exploit code
CVE-2020-27423
Anuko Time Tracker v1.19.23.5311 lacks rate limit on the password reset module which allows attacker to perform Denial of Service attack on any legitimate user…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Anuko Time Tracker 1.19.23.5311 - No rate Limit on Password Reset functionality2020-12-02 · webapps · php
Impact
Anuko Time Tracker v1.19.23.5311 lacks rate limit on the password reset module which allows attacker to perform Denial of Service attack on any legitimate user's mailbox
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Anuko | Time Tracker | through 1.19.23.5311 |