CVE-2019-25434

SpotAuditor 5.3.1.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting excessive data in the registration name field. Attackers can enter a large string of characters (5000 bytes or more) in the name field during registration to trigger an unhandled exception that crashes the application.

Score

CVSS 3.1 7.5 High

Status

Analyzed - disclosure@vulncheck.com

Published

2026-02-20

Last modified

2026-07-28

Weaknesses

CWE-121

Affected products

• Spotauditor (Nsasoft)

References

• http://www.nsauditor.com
• https://www.exploit-db.com/exploits/47494
• https://www.vulncheck.com/advisories/spotauditor-denial-of-service-via-registration-name-field