CVE Catalog
CVE-2021-27722
MediumCVSS 5.5Exploitation Probability (EPSS)
Elevated risk1.34%
68th percentile - higher than 68% of all known CVEs
Summary
An issue was discovered in SpotAuditor 5.3.5 where entering 300 bytes of character data into the 'Key' or 'Name' field during registration can crash the program.
Risk Assessment
An attacker can cause a denial of service (DoS) remotely or locally by sending crafted input, potentially disrupting system operations and affecting software availability.
Recommendation
Update SpotAuditor to the latest version if available, or implement input length restrictions on registration fields.
Original NVD description (English source)
An issue was discovered in Nsasoft US LLC SpotAuditor 5.3.5. The program can be crashed by entering 300 bytes char data into the "Key" or "Name" field while registering.