Description (CNA)
LogMeIn LastPass through 4.15.0 allows remote attackers to cause a denial of service (browser hang) via an HTML document because the resource consumption of onloadwff.js grows with the number of INPUT elements.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://twitter.com/LastPassHelp/status/955478245650071552
- https://forums.lastpass.com/viewtopic.php?f=12&t=286955
- https://www.youtube.com/watch?v=wTcYWZwq3TE
ADP enrichment
No English description supplied.