Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2022-50689

Cobian Reflector 0.9.93 RC1 Local Denial of Service via Password Field

Description

Cobian Reflector 0.9.93 RC1 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the password input field. Attackers can paste a large 8000-byte buffer into the password field to trigger an application crash during SFTP task configuration.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cobiansoft Cobian Reflector

  • 0.9.93affected

References