PT-2026-21311 · Unknown · Spotauditor

Sanjana Shetty · Publicado 2026-02-20 · Atualizado 2026-03-05 · CVE-2019-25434

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions SpotAuditor version 5.3.1.0

Description The application is susceptible to a denial of service condition. Unauthenticated attackers can cause the application to crash by providing an excessive amount of data—5000 bytes or more—in the registration name field. Specifically, entering a large string of characters in the registration name field triggers an unhandled exception, leading to application failure. The affected API endpoint is the registration form.

Recommendations Limit the maximum length of the registration name field to prevent excessively large inputs.

Exploit

Correção

DoS

Stack Overflow

Enumeração de Fraquezas

CWE-121

Identificadores relacionados

CVE-2019-25434

Produtos afetados

Spotauditor

Referências · 7

• 🔥 https://exploit-db.com/exploits/47494 · Exploit
• https://t.me/cveNotify/152678 · Publicação no Telegram
• http://nsauditor.com · Nota
• https://t.me/cveNotify/154243 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2019-25434 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-25434 · Nota de Segurança
• https://vulncheck.com/advisories/spotauditor-denial-of-service-via-registration-name-field · Nota