Description (CNA)
The Entries component in Brainstorm Force SureForms version, less than 2.12.3, does not enforce adequate limits on user-controlled form fields or submitted content during processing and rendering, which allows a remote attacker to exhaust server resources, prevent administrators from accessing the Entries interface, and trigger HTTP 500 errors via crafted form submissions.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SureForms / SureForms | affected 0 before 2.12.3 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.