CVE-2022-35220

published 2022-08-02

CVE-2022-35220: Teamplus Pro community discussion function has an ‘allocation of resource without limits or throttling’ vulnerability. A remote attacker with general user…

Priority P4 32 medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C N I N A H

Teamplus Pro community discussion function has an ‘allocation of resource without limits or throttling’ vulnerability. A remote attacker with general user privilege posting a thread with large content can cause the receiving client device to allocate too much memory, leading to abnormal termination of this client’s Teamplus Pro application.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
teamplus	team_+_pro	<= 3.011.6.0.1	—
teamplus_technology_inc	teamplus_pro	unspecified – 3.011.6.0.1	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-770