← CVE Intelligence

CVE-2021-42120

Missing Character Length (Denial of Service) in TopEase PUBLISHED

Description (CNA)

Insufficient Input Validation in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27 on all object attributes allows an authenticated remote attacker with Object Modification privileges to insert arbitrarily long strings, eventually leading to exhaustion of the underlying resource.

Affected (CNA)

Vendor / productVersions
Business-DNA Solutions GmbH / TopEaseaffected unspecified through 7.1.27

CWE

CWE-20

References

ADP enrichment

CVE

No English description supplied.