Lanmarc77

Name of the Vulnerable Software and Affected Versions: TH Wildau COVID-19 Contact Tracing application through 2021-09-01 Description: The issue is related to Incorrect Access Control in the `api/account/register` endpoint. An attacker can create 500 random users within 2500 seconds, potentially interfering with the tracing of infection chains. Recommendations: For the TH Wildau COVID-19 Contact Tracing application through 2021-09-01, consider temporarily restricting access to the `api/account/register` endpoint to prevent exploitation until a fix is available. As a mitigation measure, limit the number of user registrations within a certain time frame to prevent abuse. At the moment, there is no information about a newer version that contains a fix for this issue.