Threats tagged 'ghsa-3hf5-9fwq-fwv2'

SEPPmail Secure Email Gateway versions prior to 15.1.1 have a vulnerability where v1 file-interface upload data is processed and written before authenticating the caller and without enforcing an absolute request-size limit. This allows unauthenticated remote attackers to consume system resources by sending concurrent or slow requests, potentially causing service unavailability due to resource exhaustion.