CVE Catalog
CVE-2017-8827
CriticalSummary
The forgotpassword.php file in GeniXCMS 1.0.2 lacks a rate limit, which may allow remote attackers to cause a denial of service (login inability) or conduct Arbitrary User Password Reset attacks.
Risk Assessment
The lack of a rate limit for login attempts may lead to DoS attacks and allow unauthorized users to reset passwords, compromising user account security.
Recommendation
It is recommended to implement a rate limit on login attempts to mitigate the risk of denial of service and password reset attacks.
Original NVD description (English source)
forgotpassword.php in GeniXCMS 1.0.2 lacks a rate limit, which might allow remote attackers to cause a denial of service (login inability) or possibly conduct Arbitrary User Password Reset attacks via a series of requests.