SpotAuditor Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in SpotAuditor version 5.3.1.0. This vulnerability allows unauthenticated attackers to crash the application by sending excessive data in the registration name field. During the registration process, entering a large string of characters (5000 bytes or more) in the name field triggers an unhandled exception that causes the application to crash.

Impact

Exploitation of this vulnerability leads to a crash of the SpotAuditor application, causing a denial-of-service condition.

Reproduction

To reproduce this vulnerability, install SpotAuditor version 5.3.1.0 and access the registration feature. In the name field, enter 5000 bytes of data, such as 5000 'A' characters, and submit the registration. This will trigger an unhandled exception and crash the application.