The flaw allows a local attacker to submit an oversized string into the Folder Path field of the System Compare feature, causing the application to become unresponsive or crash and thereby disrupting availability. While the description does not explicitly state a buffer overflow, the absence of bounds checking on this input leads the analyst to infer that a buffer-related issue is at play.

AdminExpress version 1.2.5 from the vendor Admin‑Express. No other versions or products are listed as impacted.

The CVSS score of 6.9 signifies moderate severity. No EPSS data is available, and the flaw is not listed in the CISA KEV catalog, suggesting limited known exploitation. The description indicates that only local access is required, implying a local attack vector. The lack of bounds checking implies low exploitation complexity, although this conclusion is inferred from the input.