QwikSec

Security Database

CVE

CWE

Training

CVE-2023-53873

Published: Dec 15, 2025

Modified: Apr 7, 2026

PUBLISHED

Description

SyncBreeze 15.2.24 contains a denial of service vulnerability in the login authentication mechanism that allows attackers to crash the service. Attackers can send an oversized password parameter with repeated 'password=' values to overwhelm the login endpoint and potentially disrupt service availability.

Vendor	Product	Versions
Syncbreeze	SyncBreeze	affected `15.2.24`

Weaknesses (CWE)

References

ExploitDB-51725

exploit

SyncBreeze Product Webpage

product

VulnCheck Advisory: SyncBreeze 15.2.24 Denial of Service via Login Endpoint Overflow

third-party-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.