Description
Missing rate limiting, per-account submission quota and geographic validation in the publicar_aviso RPC function in Lagarto Chivato 0.4.1 and earlier on Web allows remote authenticated attackers to flood the moderation queue via unlimited submission of notices with arbitrary coordinates.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| XauenDevs | Lagarto Chivato | 0.1.0 ≤0.4.1 | — |