Description (CNA)
WebSSH for iOS 14.16.10 contains a denial of service vulnerability in the mashREPL tool that allows attackers to crash the application by pasting malformed input. Attackers can trigger the vulnerability by copying a 300-character buffer of repeated 'A' characters into the mashREPL input field, causing the application to crash.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| WebSSH / WebSSH for iOS | affected 14.16.10 |
CWE
CWE-1284
References
- https://www.exploit-db.com/exploits/49883
- https://apps.apple.com/mx/app/webssh-ssh-client/id497714887
- https://www.vulncheck.com/advisories/webssh-for-ios-mashrepl-denial-of-service
ADP enrichment
No English description supplied.
No references supplied.