high7.5
CVE-2021-47815
Nsauditor 3.2.3 contains a denial of service vulnerability in the registration code input field that allows attackers to crash the application.
Impact
Nsauditor 3.2.3 contains a denial of service vulnerability in the registration code input field that allows attackers to crash the application. Attackers can paste a large buffer of 256 repeated characters into the 'Key' field to trigger an application crash.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nsasoft | Nsauditor | before 3.2.7 |