Denial of Service

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. A lack of rate limiting in the 'forgot password' feature of Zammad v5.1.0 allows attackers to send an excessive amount of reset requests for a legitimate user, leading to a possib…CVE-2022-29701Zammad · 1.0% likely

   CWE-770

2. An issue was discovered in Zammad before 4.1.1. An attacker with valid agent credentials may send a series of crafted requests that cause an endless loop and thus cause denial of…CVE-2021-42084Zammad · 0.9% likely

   CWE-835

3. An issue was discovered in Zammad before 6.2.0. Due to lack of rate limiting in the "email address verification" feature, an attacker could send many requests for a known address…CVE-2023-50455Zammad · 0.7% likely

   CWE-770

4. In Zammad 6.4.x before 6.4.2, there is information exposure. Only agents should be able to see and work on shared article drafts. However, a logged in customer was able to see det…CVE-2025-32360Zammad · CVSS 4.2 · 0.3% likely

   CWE-402

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.