CVE-2022-35220 HIGH

CVE-2022-35220: TEAMPLUS TECHNOLOGY INC. Teamplus Pro - Allocation of Resources Without Limits or Throttling-1

Vendor Teamplus Technology Inc.
Product Teamplus Pro
Weakness CWE-770 · Uncontrolled resource consumption
Published August 2, 2022
Last update September 17, 2024
View on NVD All CVEs

CVSS base score

7.7/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

What the vulnerability does

01Description

Teamplus Pro community discussion function has an ‘allocation of resource without limits or throttling’ vulnerability. A remote attacker with general user privilege posting a thread with large content can cause the receiving client device to allocate too much memory, leading to abnormal termination of this client’s Teamplus Pro application.

Key dates

02Disclosure timeline

August 2, 2022 CVE published
September 17, 2024 Record updated