CVE-2019-25711 | NSauditor SpotFTP Password Recover 2.4.2 Registration Name reliance on untrusted inputs in a security decision (Exploit 46088 / EDB-46088)

A vulnerability was found in NSauditor SpotFTP Password Recover 2.4.2. It has been declared as problematic. This issue affects some unknown processing of the component Registration Handler. Such manipulation of the argument Name leads to reliance on untrusted inputs in a security decision.

This vulnerability is referenced as CVE-2019-25711. The attack can only be performed from a local environment. Furthermore, an exploit is available.