Description
Nsauditor 3.2.3 contains a denial of service vulnerability in the registration code input field that allows attackers to crash the application. Attackers can paste a large buffer of 256 repeated characters into the 'Key' field to trigger an application crash.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Nsauditor | Nsauditor | 3.2.3.0 | — |
References
- ExploitDB-49965 exploit
- Vendor Homepage product
- VulnCheck Advisory: Nsauditor 3.2.3 - Denial of Service (PoC) third-party-advisory