CVE-2025-51741

The Veal98 Echo Open-Source Community System (versions 2.2 through 2.3 ) is vulnerable to uncontrolled resource consumption. An unauthenticated attacker can exploit the /sendEmailCodeForResetPwd endpoint to force the server to send email verification messages to arbitrary users. This action may r...