{"id":"CVE-2026-105127","state":"PUBLISHED","title":"LaraDashboard 1.4.2 before 1.4.8 Resource Exhaustion via Password Recovery Endpoints","description":"LaraDashboard 1.4.2 before 1.4.8 applies advanced email validation to unauthenticated forgot-password and reset-password requests, triggering DNS lookups and paid AbstractAPI verification calls. Unauthenticated attackers can submit arbitrary addresses to exhaust the verification quota, making validation fail open for all public forms, and probe domain resolution.","publishedAt":"2026-10-03T23:40:00.470Z","updatedAt":"2026-10-05T15:42:38.296Z","severity":{"score":6.9,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","source":"VulnCheck"},"assigner":"VulnCheck","products":["laradashboard laradashboard"],"affected":[{"vendor":"laradashboard","product":"laradashboard","packageURL":"pkg:github/laradashboard/laradashboard","defaultStatus":"unaffected","versions":[{"version":"1.4.2","status":"affected","lessThan":"1.4.8","versionType":"semver"},{"version":"1.4.8","status":"unaffected","versionType":"semver"}]}],"references":["https://github.com/laradashboard/laradashboard/security/advisories/GHSA-v36p-8578-8gch","https://github.com/laradashboard/laradashboard/security/advisories/GHSA-5hq2-r2f3-9vp9","https://github.com/laradashboard/laradashboard/blob/v1.4.2/app/Http/Requests/Auth/ForgotPasswordRequest.php#L22-L27","https://github.com/laradashboard/laradashboard/blob/v1.4.2/app/Http/Requests/Auth/ResetPasswordRequest.php#L23-L30","https://github.com/laradashboard/laradashboard/blob/v1.4.2/app/Services/EmailVerificationService.php#L95-L114","https://github.com/laradashboard/laradashboard/blob/v1.4.2/app/Services/EmailDomainCheckService.php#L128","https://github.com/laradashboard/laradashboard/pull/339","https://github.com/laradashboard/laradashboard/commit/8babc803066a74c628fa012928fb1e6591411eba","https://github.com/laradashboard/laradashboard/releases/tag/v1.4.8","https://github.com/laradashboard/laradashboard","https://www.vulncheck.com/advisories/laradashboard-1.4.2-before-1.4.8-resource-exhaustion-via-password-recovery-endpoints"],"weaknesses":["CWE-770"],"ingestedAt":"2026-10-29T20:10:23.711Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/105xxx/CVE-2026-105127.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-105127","state":"PUBLISHED","datePublished":"2026-10-03T23:40:00.470Z","dateUpdated":"2026-10-05T15:42:38.296Z","assignerShortName":"VulnCheck","assignerOrgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateReserved":"2026-10-03T12:05:26.755Z"},"containers":{"cna":{"title":"LaraDashboard 1.4.2 before 1.4.8 Resource Exhaustion via Password Recovery Endpoints","descriptions":[{"lang":"en","value":"LaraDashboard 1.4.2 before 1.4.8 applies advanced email validation to unauthenticated forgot-password and reset-password requests, triggering DNS lookups and paid AbstractAPI verification calls. Unauthenticated attackers can submit arbitrary addresses to exhaust the verification quota, making validation fail open for all public forms, and probe domain resolution."}],"affected":[{"vendor":"laradashboard","product":"laradashboard","packageURL":"pkg:github/laradashboard/laradashboard","defaultStatus":"unaffected","versions":[{"version":"1.4.2","status":"affected","lessThan":"1.4.8","versionType":"semver"},{"version":"1.4.8","status":"unaffected","versionType":"semver"}]}],"references":[{"url":"https://github.com/laradashboard/laradashboard/security/advisories/GHSA-v36p-8578-8gch","tags":["vendor-advisory"],"name":"GitHub Security Advisory (GHSA-v36p-8578-8gch)"},{"url":"https://github.com/laradashboard/laradashboard/security/advisories/GHSA-5hq2-r2f3-9vp9","tags":["vendor-advisory"],"name":"GitHub Security Advisory (GHSA-5hq2-r2f3-9vp9)"},{"url":"https://github.com/laradashboard/laradashboard/blob/v1.4.2/app/Http/Requests/Auth/ForgotPasswordRequest.php#L22-L27","tags":["technical-description"]},{"url":"https://github.com/laradashboard/laradashboard/blob/v1.4.2/app/Http/Requests/Auth/ResetPasswordRequest.php#L23-L30","tags":["technical-description"]},{"url":"https://github.com/laradashboard/laradashboard/blob/v1.4.2/app/Services/EmailVerificationService.php#L95-L114","tags":["technical-description"]},{"url":"https://github.com/laradashboard/laradashboard/blob/v1.4.2/app/Services/EmailDomainCheckService.php#L128","tags":["technical-description"]},{"url":"https://github.com/laradashboard/laradashboard/pull/339","tags":["patch","issue-tracking"]},{"url":"https://github.com/laradashboard/laradashboard/commit/8babc803066a74c628fa012928fb1e6591411eba","tags":["patch"]},{"url":"https://github.com/laradashboard/laradashboard/releases/tag/v1.4.8","tags":["release-notes"],"name":"laradashboard v1.4.8 Release Notes"},{"url":"https://github.com/laradashboard/laradashboard","tags":["product"]},{"url":"https://www.vulncheck.com/advisories/laradashboard-1.4.2-before-1.4.8-resource-exhaustion-via-password-recovery-endpoints","name":"VulnCheck Advisory: LaraDashboard 1.4.2 before 1.4.8 Resource Exhaustion via Password Recovery Endpoints","tags":["third-party-advisory"]}],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","baseScore":6.9,"baseSeverity":"MEDIUM"}},{"format":"CVSS","cvssV3_1":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW","baseScore":5.3,"baseSeverity":"MEDIUM"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-770","lang":"en","description":"Allocation of Resources Without Limits or Throttling","type":"CWE"}]}],"providerMetadata":{"shortName":"VulnCheck","orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateUpdated":"2026-10-03T23:40:00.470Z"},"datePublic":"2026-09-30T00:00:00.000Z","cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:laradashboard:lara_dashboard:*:*:*:*:*:*:*:*","versionEndExcluding":"1.4.8"}]}]}],"credits":[{"lang":"en","value":"EVIL0RD","type":"finder"}],"x_generator":{"engine":"vulncheck-endgame"}},"adp":[{"title":"CISA ADP Vulnrichment","references":[{"url":"https://github.com/laradashboard/laradashboard/security/advisories/GHSA-v36p-8578-8gch","tags":["exploit"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-10-05T15:42:13.004909Z","id":"CVE-2026-105127","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-10-05T15:42:38.296Z"}}]}}}