Denial of Service Vulnerability in LogMeIn LastPass through 4.15.0

Denial of Service Vulnerability in LogMeIn LastPass through 4.15.0

CVE-2018-10193 · MEDIUM Severity

AV:N/AC:L/AU:N/C:N/I:N/A:P

LogMeIn LastPass through 4.15.0 allows remote attackers to cause a denial of service (browser hang) via an HTML document because the resource consumption of onloadwff.js grows with the number of INPUT elements.

Learn more about our Web Application Penetration Testing UK.