CVE-2019-25613 - Easy Chat Server 3.1 Denial of Service via message Parameter

Back Back to CVE browser

HIGH

Easy Chat Server 3.1 Denial of Service via message Parameter

Published Mar 22, 2026

8.7

HIGH

CVSS 4.0

EPSS 0.52%

Description

Easy Chat Server 3.1 contains a denial of service vulnerability that allows remote attackers to crash the application by sending oversized data in the message parameter. Attackers can establish a session via the chat.ghp endpoint and then send a POST request to body2.ghp with an excessively large message parameter value to cause the service to crash.

Affected products

Vendor Echatserver Product Easy Chat Default
n/a
- Version
  3.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Echatserver

Easy Chat

n/a

Version	Status	Constraints
3.1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-940

References (5)

http://www.echatserver.com
productBroken Link
http://www.echatserver.com/ecssetup.exe
productBroken Link
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-19967
Advisory
https://www.exploit-db.com/exploits/46806
exploitThird Party AdvisoryVDB Entry
https://www.vulncheck.com/advisories/easy-chat-server-denial-of-service-via-message-parameter
third-party-advisoryThird Party Advisory

Link	Providers	Tags
http://www.echatserver.com		productBroken Link
http://www.echatserver.com/ecssetup.exe		productBroken Link
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-19967		Advisory
https://www.exploit-db.com/exploits/46806		exploitThird Party AdvisoryVDB Entry
https://www.vulncheck.com/advisories/easy-chat-server-denial-of-service-via-message-parameter		third-party-advisoryThird Party Advisory