Skip to content
OpenAdvisories
Medium · 4.3 CVE-2021-42122 EUVD-2021-29107GHSA-7pq6-99v4-7fp6

Denial of Service via Invalid Object Attribute in TopEase

Published Nov 30, 2021 · Updated Aug 4, 2024 · Assigned by NCSC.ch

Description

Insufficient Input Validation in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27 on an object’s attributes with numeric format allows an authenticated remote attacker with Object Modification privileges to insert an unexpected format, which makes the affected attribute non-editable.

Affected products

VendorProductAffectedFixed
Business-DNA Solutions TopEase unspecified – ≤ 7.1.27 —

References