Denial of Service (DoS) Vulnerability in Nicotine+ 3.0.3 and Later: Null Character File Path Crash

CVE-2021-45848 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Denial of service (DoS) vulnerability in Nicotine+ 3.0.3 and later allows a user with a modified Soulseek client to crash Nicotine+ by sending a file download request with a file path containing a null character.

Learn more about our User Device Pen Test.