PT-2026-21311 · Unknown · Spotauditor

Sanjana Shetty · Published 2026-02-20 · Updated 2026-03-05 · CVE-2019-25434

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions SpotAuditor version 5.3.1.0

Description The application is susceptible to a denial of service condition. Unauthenticated attackers can cause the application to crash by providing an excessive amount of data—5000 bytes or more—in the registration name field. Specifically, entering a large string of characters in the registration name field triggers an unhandled exception, leading to application failure. The affected API endpoint is the registration form.

Recommendations Limit the maximum length of the registration name field to prevent excessively large inputs.

Exploit

Fix

DoS

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2019-25434

Affected Products

Spotauditor

References · 7

• 🔥 https://exploit-db.com/exploits/47494 · Exploit
• https://osv.dev/vulnerability/CVE-2019-25434 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-25434 · Security Note
• https://t.me/cveNotify/152678 · Telegram Post
• http://nsauditor.com · Note
• https://t.me/cveNotify/154243 · Telegram Post
• https://vulncheck.com/advisories/spotauditor-denial-of-service-via-registration-name-field · Note