Vulnerability Details CVE-2022-35220
Teamplus Pro community discussion function has an ‘allocation of resource without limits or throttling’ vulnerability. A remote attacker with general user privilege posting a thread with large content can cause the receiving client device to allocate too much memory, leading to abnormal termination of this client’s Teamplus Pro application.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 57.3%
CVSS Severity
CVSS v3 Score 7.7
References
Products affected by CVE-2022-35220
-
cpe:2.3:a:teamplus:team+_pro:-
-
cpe:2.3:a:teamplus:team+_pro:3.0.0.8
-
cpe:2.3:a:teamplus:team+_pro:3.0.0.9
-
cpe:2.3:a:teamplus:team+_pro:3.0.1.1
-
cpe:2.3:a:teamplus:team+_pro:3.0.1.4
-
cpe:2.3:a:teamplus:team+_pro:3.0.1.5
-
cpe:2.3:a:teamplus:team+_pro:3.0.2.2
-
cpe:2.3:a:teamplus:team+_pro:3.0.2.7
-
cpe:2.3:a:teamplus:team+_pro:3.0.3.5
-
cpe:2.3:a:teamplus:team+_pro:3.0.3.7
-
cpe:2.3:a:teamplus:team+_pro:3.0.4.0
-
cpe:2.3:a:teamplus:team+_pro:3.0.4.2
-
cpe:2.3:a:teamplus:team+_pro:3.0.4.3
-
cpe:2.3:a:teamplus:team+_pro:3.0.4.4
-
cpe:2.3:a:teamplus:team+_pro:3.0.4.8
-
cpe:2.3:a:teamplus:team+_pro:3.0.5.0
-
cpe:2.3:a:teamplus:team+_pro:3.011.6.0.1