Email Rate Limiting via no rate limiting

Описание: #Email Rate Limiting Vulnerability (No Rate Limiting)

Email rate limiting is a security control that restricts how many emails an application can send (or email-related requests it can process) within a given time window.
When no rate limiting is implemented, it becomes a high-impact abuse and security vulnerability.

#What “No Rate Limiting” Means

The application allows unlimited email-triggering requests such as:

Password reset emails

Account verification emails

OTP / magic link emails

Contact / feedback form submissions

Invite or referral emails

…without restricting frequency per user, IP, account, or device.