CVE-2018-10193 LogMeIn LastPass through 4.15.0 allows remote attackers to cause a denial of service (browser hang) via an HTML document because the resource consumption of onloadwff.js grows with the number of INPUT...
HighCVSS 7.5
EPSS 4.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
LogMeIn LastPass through 4.15.0 allows remote attackers to cause a denial of service (browser hang) via an HTML document because the resource consumption of onloadwff.js grows with the number of INPUT elements.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| logmein lastpass | <= 4.15.0 | No fix listed |
References
- forums.lastpass.com issue-tracking third-party-advisory
- twitter.com issue-tracking third-party-advisory
- www.youtube.com exploit third-party-advisory