Description
SyncBreeze 15.2.24 contains a denial of service vulnerability in the login authentication mechanism that allows attackers to crash the service. Attackers can send an oversized password parameter with repeated 'password=' values to overwhelm the login endpoint and potentially disrupt service availability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Syncbreeze | SyncBreeze | 15.2.24 | — |
References
- ExploitDB-51725 exploit
- SyncBreeze Product Webpage product
- VulnCheck Advisory: SyncBreeze 15.2.24 Denial of Service via Login Endpoint Overflow third-party-advisory