Description
AdminExpress 1.2.5 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input through the System Compare feature. Attackers can paste a large buffer of characters into the Folder Path field and trigger the comparison function to cause the application to become unresponsive or crash.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Admin-Express | AdminExpress | 1.2.5.485 | — |
References
- ExploitDB-46711 exploit
- Product Reference product
- VulnCheck Advisory: AdminExpress 1.2.5 Denial of Service via System Compare third-party-advisory