CVE-2022-32958 HIGH

CVE-2022-32958: TEAMPLUS TECHNOLOGY INC. Teamplus Pro - Allocation of Resources Without Limits or Throttling

Vendor Teamplus Technology Inc.
Product Teamplus Pro (Private cloud)
Weakness CWE-770 · Uncontrolled resource consumption
Published July 20, 2022
Last update September 17, 2024
View on NVD All CVEs

CVSS base score

7.7/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

What the vulnerability does

01Description

A remote attacker with general user privilege can send a message to Teamplus Pro’s chat group that exceeds message size limit, to terminate other recipients’ Teamplus Pro chat process.

Key dates

02Disclosure timeline

July 20, 2022 CVE published
September 17, 2024 Record updated