Skip to content
OpenAdvisories
Medium · 6.5 CVE-2021-42120 EUVD-2021-29105GHSA-hjpq-rp56-x2qm

Missing Character Length (Denial of Service) in TopEase

Published Nov 30, 2021 · Updated Aug 4, 2024 · Assigned by NCSC.ch

Description

Insufficient Input Validation in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27 on all object attributes allows an authenticated remote attacker with Object Modification privileges to insert arbitrarily long strings, eventually leading to exhaustion of the underlying resource.

Affected products

VendorProductAffectedFixed
Business-DNA Solutions TopEase unspecified – ≤ 7.1.27 —

References