The comment function in YzmCMS v6.3 was discovered as being able to be operated concurrently, allowing attackers to create an unusually large number of comments...
5.3CVSS6AI score0.01082EPSS
SaveExploits1References2
Hacker One•added 2018/09/02 10:15 a.m.•50 views
Weblate: flood of comment no rate limit on commnets >> by using different user agent
It was possible to post 200- 300 of comments within minutes, there was no rate limiting applied...
