VULNERABILITY INTELLIGENCE
CVE-2023-53873
EPSS probability0.49%
CISA KEVNot currently listed
Published2025-12-15
Last modified2026-06-17
Description
SyncBreeze 15.2.24 contains a denial of service vulnerability in the login authentication mechanism that allows attackers to crash the service. Attackers can send an oversized password parameter with repeated 'password=' values to overwhelm the login endpoint and potentially disrupt service availability.
Weakness classification
- disclosure@vulncheck.com: CWE-400