CVE-2021-42121CWE-20

Denial of Service via Invalid Date Format in TopEase

Medium · published November 30, 2021

CVSS v3.1
4.3
EPSS
1%
Percentile
63.4
In the wild
Unconfirmed
What it is

Insufficient Input Validation in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27 on an object’s date attribute(s) allows an authenticated remote attacker with Object Modification privileges to insert an unexpected format into date fields, which leads to breaking the object page that the date field is present.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.01032 · 63.4th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2021-11-30T11:28Z
EPSS history
Timeline
  • 30 NOV 11:28Z
    Denial of Service via Invalid Date Format in TopEase
    cvelistv5