WS-2021-0183

BTCPay Server before 1.0.7.1 forget password page was not properly rate-limiting the attempts, resulting in a malicious user mail bombard the victim with forget password emails...