Description
SpotAuditor 5.3.1.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting excessive data in the registration name field. Attackers can enter a large string of characters (5000 bytes or more) in the name field during registration to trigger an unhandled exception that crashes the application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Nsasoft | Nsauditor SpotAuditor | SpotAuditor 5.3.1.0 | — |
References
- ExploitDB-47494 exploit
- Official Product Homepage product
- VulnCheck Advisory: SpotAuditor 5.3.1.0 Denial of Service via Registration Name Field third-party-advisory