Description (CNA)
SyncBreeze 15.2.24 contains a denial of service vulnerability in the login authentication mechanism that allows attackers to crash the service. Attackers can send an oversized password parameter with repeated 'password=' values to overwhelm the login endpoint and potentially disrupt service availability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Syncbreeze / SyncBreeze | affected 15.2.24 |
CWE
CWE-400
References
- https://www.exploit-db.com/exploits/51725
- https://www.syncbreeze.com/
- https://www.vulncheck.com/advisories/syncbreeze-denial-of-service-via-login-endpoint-overflow
ADP enrichment
No English description supplied.
No references supplied.