CVE-2019-25434
HIGHCVSS v3.1: 7.5 · EPSS: 0.0037 (28.6 percentile)
Source data as of:
At a glance
- Severity
- HIGH
- CVSS
- 7.5 v3.1 · NVD
- EPSS
- 0.0037 (28.6 percentile) · FIRST.org
- CISA KEV
- No
- Type
- Stack Overflow · NVD CWE
- Attack conditions (CVSS vector)
- NetworkNo privilegesNo user interaction · Source: NVD Vector
- Affected vendors
- nsasoft
- Published
- 2026-02-20 · Modified: 2026-06-29
- References
- Jump to references (3)
CVSS / EPSS / KEV
Source — CVSS: NVD · EPSS: FIRST.org · KEV: CISA. Data & Sources
Description
SpotAuditor 5.3.1.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting excessive data in the registration name field. Attackers can enter a large string of characters (5000 bytes or more) in the name field during registration to trigger an unhandled exception that crashes the application.
References
Reference URLs as listed by NVD, grouped by a mechanical match on the link's host/pattern. Labels describe the link type only.
- Reference http://www.nsauditor.com
- Exploit / PoC https://www.exploit-db.com/exploits/47494
- Vendor advisory https://www.vulncheck.com/advisories/spotauditor-denial-of-service-via-registration-name-f…