Proof of Concept

1)Go to https://rdiffweb-dev.ikus-soft.com/prefs/general endpoint . 
2)You will see a field called "Fullname"
3)Here you will see that there is no limit for the "Fullname" parameter that allows a user to to set a very long string as long as 1 million characters .
4)This may possibly result in a memory corruption/DOS attack.

Mitigation: There must be a fixed length for the "Fullname" parameter upto 128 characters