CVE-2021-42120CWE-20

Missing Character Length (Denial of Service) in TopEase

Medium · published November 30, 2021

CVSS v3.1
6.5
EPSS
1%
Percentile
65.4
In the wild
Unconfirmed
What it is

Insufficient Input Validation in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27 on all object attributes allows an authenticated remote attacker with Object Modification privileges to insert arbitrarily long strings, eventually leading to exhaustion of the underlying resource.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01101 · 65.4th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2021-11-30T11:28Z
EPSS history
Timeline
  • 30 NOV 11:28Z
    Missing Character Length (Denial of Service) in TopEase
    cvelistv5