Threats tagged 'ghsa-wc63-fx83-5x9w'

Lagarto Chivato versions 0.4.1 and earlier have a vulnerability in the publicar_aviso RPC function where there is no rate limiting, per-account submission quota, or geographic validation. This allows remote authenticated attackers to flood the moderation queue by submitting unlimited notices with arbitrary coordinates. The vulnerability has a medium severity rating with a CVSS score of 4.3.