Log in Start free

Vulnerability · Published Aug 2, 2022 · Assigned by twcert

CVE-2022-35221TEAMPLUS TECHNOLOGY INC. Teamplus Pro - Allocation of Resources Without Limits or Throttling-2

Medium 5.4

In plain English

A medium-severity resource allocation without limits in Teamplus Pro from TEAMPLUS TECHNOLOGY INC.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 56% of all known vulnerabilities).

Severity (CVSS 3.1)5.4Medium
Exploit odds (30 days)0.8%top 43.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

Teamplus Pro community discussion has an ‘allocation of resource without limits or throttling’ vulnerability on thread subject field. A remote attacker with general user privilege posting a thread subject with large content can cause the server to allocate too much memory, leading to missing partial post content and disrupt partial service.

Affected products (as reported)

VendorProductVersions
TEAMPLUS TECHNOLOGY INC. Teamplus Pro unspecified – through 3.011.6.0.1
TEAMPLUS TECHNOLOGY INC. Teamplus Pro unspecified – through 3.011.6.0.1

Weakness: CWE-770 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

References