CVE-2022-35221CWE-770
TEAMPLUS TECHNOLOGY INC. Teamplus Pro - Allocation of Resources Without Limits or Throttling-2
Medium · published August 2, 2022
What it is
Teamplus Pro community discussion has an ‘allocation of resource without limits or throttling’ vulnerability on thread subject field. A remote attacker with general user privilege posting a thread subject with large content can cause the server to allocate too much memory, leading to missing partial post content and disrupt partial service.
The record
Technical detail
- CVSS v3.1
- 5.4 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
- CVSS v4.0
- Not supplied
- EPSS
- 0.00790 · 55.8th percentile
- Weakness
- CWE-770 · Allocation of Resources Without Limits or Throttling
- Published
- 2022-08-02T15:20Z
EPSS history
Timeline