CVE-2023-40515CWE-20

LG Simple Editor joinAddUser Improper Input Validation Denial-of-Service Vulnerability

High · published May 3, 2024

CVSS v3.0
7.5
EPSS
1%
Percentile
72.3
In the wild
Unconfirmed
What it is

LG Simple Editor joinAddUser Improper Input Validation Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the joinAddUser method. The issue results from improper input validation. An attacker can leverage this vulnerability to create a denial-of-service condition on the system.

. Was ZDI-CAN-20048.

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01400 · 72.3th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2024-05-03T02:11Z
EPSS history
Timeline
  • 03 MAY 02:11Z
    LG Simple Editor joinAddUser Improper Input Validation Denial-of-Service Vulnerability
    cvelistv5