I wanted to see if anyone else noticed this problem and if you think its a DoS issue. Support seems to think its just a user training issue.
If a user logs into the Web Help Desk and can enter into the CC field we can reproduce this issue.
If you type a short sentence into the CC field and submit the ticket the Web Help Desk seperates all the words as individual email addresses. It then tries to send the emails. It then continues attempting to send the emails over and over again in an infinite loop.
We first noticed this when out SMTP system stopped sending out emails because it had reached its daily 10k limit. However, when I tried reproducing the issue we were not seeing the emails going out through SMTP anymore, but the logs in Web Help Desk were still showing Web Help Desk trying to send them, which elevated the CPU usage. And this was with just a single Ticket. I can't imagine if someone created multiple tickets trying to be malicious. And even once I had deleted the ticket it took a little while for the message queue to empty itself.
I found the following support notice that looks like it might be related.
https://support.solarwinds.com/SuccessCenter/s/article/Web-Help-Desk-Continuously-Sending-Email?language=en_US
