The vulnerability exists in SourceCodester Customer Review App 1.0, specifically in the review_app.py module. Manipulating the arguments name or comment sent to the add_review, save_review, or get_all_reviews functions causes a denial of service by crashing the application. The flaw is classified as CWE‑404, indicating an improper resource shutdown that allows legitimate requests to exhaust system resources.

Affected systems are installations of SourceCodester Customer Review App version 1.0. No additional version details are disclosed, and the product is identified by the corresponding CPE record for this application.

The CVSS score of 4.8 signifies a moderate impact, and the lack of an EPSS score and absence from the CISA KEV catalog suggest no high probability of widespread exploitation. Because the attack requires a local approach, only users with local access or compromised hosts can trigger the denial of service. Organizations should evaluate whether local users or staff can abuse this flaw and consider it a moderate risk to service availability.