CVE-2022-35221

published 2022-08-02

CVE-2022-35221: Teamplus Pro community discussion has an ‘allocation of resource without limits or throttling’ vulnerability on thread subject field. A remote attacker with…

Priority P4 27 medium 5.4 CVSS 3.1

AV N AC L PR L UI N S U C N I L A L

Teamplus Pro community discussion has an ‘allocation of resource without limits or throttling’ vulnerability on thread subject field. A remote attacker with general user privilege posting a thread subject with large content can cause the server to allocate too much memory, leading to missing partial post content and disrupt partial service.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
teamplus	team_+_pro	<= 3.011.6.0.1	—
teamplus_technology_inc	teamplus_pro	unspecified – 3.011.6.0.1	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-770