SyncBreeze 10.0.28 contains a denial of service vulnerability in the login endpoint that allows remote attackers to crash the service. Attackers can send an ove…

SyncBreeze 10.0.28 contains a denial of service vulnerability in the login endpoint that allows remote attackers to crash the service by sending oversized payloads in login requests. This vulnerability can overwhelm the application and disrupt service availability. The vulnerability is identified as CVE-2020-36946 and has been documented in multiple security databases. Attackers can exploit this remotely without authentication. The issue affects the login functionality specifically and can lead to complete service disruption.