| Título | mtons https://gitee.com/mtons/mblog <=3.5.0 Email Enumeration |
|---|
| Descripción | The /email/send_code endpoint is used to send verification codes to registered users' email addresses, has no rate limiting, no CAPTCHA protection, leading to the ability to brute force user email addresses. |
|---|
| Fuente | ⚠️ https://gitee.com/mtons/mblog/issues/ICPMJR |
|---|
| Usuario | ZAST.AI (UID 87884) |
|---|
| Sumisión | 2025-08-11 02:06 (hace 1 Año) |
|---|
| Moderación | 2025-08-13 13:18 (2 days later) |
|---|
| Estado | Aceptado |
|---|
| Entrada de VulDB | 319886 [mtons mblog hasta 3.5.0 Verification Code /email/send_code email divulgación de información] |
|---|
| Puntos | 17 |
|---|