PT-2022-22639 · Unknown · Teamplus Pro

Rayhong · Published 2022-08-02 · Updated 2022-08-08 · CVE-2022-35221

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions Teamplus Pro (affected versions not specified)

Description The issue is related to an 'allocation of resource without limits or throttling' vulnerability in the thread subject field of the community discussion feature. A remote attacker with general user privileges can post a thread subject with large content, causing the server to allocate excessive memory. This can lead to missing partial post content and disrupt partial service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2022-35221

Affected Products

Teamplus Pro

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2022-35221 · Security Note
• https://osv.dev/vulnerability/CVE-2022-35221 · Vendor Advisory
• https://t.me/cibsecurity/47430 · Telegram Post
• https://twcert.org.tw/tw/cp-132-6360-7bf50-1.html · Note