Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h7mp-qf49-hgph

Опубликовано: 15 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 8.7

Описание

SyncBreeze 15.2.24 contains a denial of service vulnerability in the login authentication mechanism that allows attackers to crash the service. Attackers can send an oversized password parameter with repeated 'password=' values to overwhelm the login endpoint and potentially disrupt service availability.

SyncBreeze 15.2.24 contains a denial of service vulnerability in the login authentication mechanism that allows attackers to crash the service. Attackers can send an oversized password parameter with repeated 'password=' values to overwhelm the login endpoint and potentially disrupt service availability.

EPSS

Процентиль: 50%
0.00264
Низкий

8.7 High

CVSS4

Дефекты

CWE-400

Связанные уязвимости

nvd
около 2 месяцев назад

SyncBreeze 15.2.24 contains a denial of service vulnerability in the login authentication mechanism that allows attackers to crash the service. Attackers can send an oversized password parameter with repeated 'password=' values to overwhelm the login endpoint and potentially disrupt service availability.

EPSS

Процентиль: 50%
0.00264
Низкий

8.7 High

CVSS4

Дефекты

CWE-400