CVE-2022-35221CWE-770

TEAMPLUS TECHNOLOGY INC. Teamplus Pro - Allocation of Resources Without Limits or Throttling-2

Medium · published August 2, 2022

CVSS v3.1
5.4
EPSS
1%
Percentile
55.8
In the wild
Unconfirmed
What it is

Teamplus Pro community discussion has an ‘allocation of resource without limits or throttling’ vulnerability on thread subject field. A remote attacker with general user privilege posting a thread subject with large content can cause the server to allocate too much memory, leading to missing partial post content and disrupt partial service.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00790 · 55.8th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2022-08-02T15:20Z
EPSS history
Timeline
  • 02 AUG 15:20Z
    TEAMPLUS TECHNOLOGY INC. Teamplus Pro - Allocation of Resources Without Limits or Throttling-2
    cvelistv5