LG Simple Editor joinAddUser Improper Input Validation Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the joinAddUser method. The issue results from improper input validation. An attacker can leverage this vulnerability to create a denial-of-service condition on the system.
. Was ZDI-CAN-20048.
References
| Link | Resource |
|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-23-1197/ | Third Party Advisory |
| https://www.zerodayinitiative.com/advisories/ZDI-23-1197/ | Third Party Advisory |
Configurations
History
10 Apr 2025, 14:36
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Lg
Lg simple Editor |
|
| CWE | NVD-CWE-noinfo | |
| CPE | cpe:2.3:a:lg:simple_editor:3.21.0:*:*:*:*:*:*:* | |
| References | () https://www.zerodayinitiative.com/advisories/ZDI-23-1197/ - Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
18 Sep 2024, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | LG Simple Editor joinAddUser Improper Input Validation Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the joinAddUser method. The issue results from improper input validation. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. . Was ZDI-CAN-20048. |
03 May 2024, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-05-03 03:15
Updated : 2025-04-10 14:36
NVD link : CVE-2023-40515
Mitre link : CVE-2023-40515
JSON object : View
Products Affected
lg
- simple_editor
CWE