Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2021-42120

Missing Character Length (Denial of Service) in TopEase

Description

Insufficient Input Validation in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27 on all object attributes allows an authenticated remote attacker with Object Modification privileges to insert arbitrarily long strings, eventually leading to exhaustion of the underlying resource.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Business-DNA Solutions GmbH TopEase

  • unspecified to ≤ 7.1.27affected

References