CVE-2020-27423

—

CVSS 3.1

7.5 high

EPSS

6%p93

Published

Nov 16, 2020 (Nov 16, 2020)

Modified

Jun 17, 2026

Description

Anuko Time Tracker v1.19.23.5311 lacks rate limit on the password reset module which allows attacker to perform Denial of Service attack on any legitimate user's mailbox

Vendors: anuko
Products: time tracker
Weakness: CWE-307
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (6.4%)

In the news0 stories

No ingested article mentions this CVE yet.