Description (CNA)
SpotAuditor 5.3.1.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting excessive data in the registration name field. Attackers can enter a large string of characters (5000 bytes or more) in the name field during registration to trigger an unhandled exception that crashes the application.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Nsasoft / Nsauditor SpotAuditor | affected SpotAuditor 5.3.1.0 |
CWE
CWE-121
References
- https://www.exploit-db.com/exploits/47494
- http://www.nsauditor.com
- https://www.vulncheck.com/advisories/spotauditor-denial-of-service-via-registration-name-field
ADP enrichment
No English description supplied.
No references supplied.