Resource exhaustion in Syncbreeze

CVE-2023-53873

SyncBreeze 15.2.24 contains a denial of service vulnerability in the login authentication mechanism that allows attackers to crash the service. Attackers can send an oversized password parameter with repeated 'password=' values to overwhelm the login endpoint and potentially disrupt service availability.

Vulnerability class: DoS (Denial of Service)

EPSS: 0.004 (36.5th percentile) — read the EPSS interpretation.