Skip to content
OpenAdvisories
High · 7.5 CVE-2023-40515 EUVD-2023-45086GHSA-pmh3-7354-8ph4

LG Simple Editor joinAddUser Improper Input Validation Denial-of-Service Vulnerability

Published May 3, 2024 · Updated Sep 18, 2024 · Assigned by zdi

Description

LG Simple Editor joinAddUser Improper Input Validation Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the joinAddUser method. The issue results from improper input validation. An attacker can leverage this vulnerability to create a denial-of-service condition on the system.
. Was ZDI-CAN-20048.

Affected products

VendorProductAffectedFixed
LG Simple Editor LG Simple Editor 3.21.0 —

References