← Database

CVE-2021-42120

MEDIUM CVSS: 6.5 Published: 2021-11-30 Modified: 2026-06-17

Description

Insufficient Input Validation in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27 on all object attributes allows an authenticated remote attacker with Object Modification privileges to insert arbitrarily long strings, eventually leading to exhaustion of the underlying resource.

Affected Platforms

Businessdnasolutions Topease

Weakness Type

CWE-20, CWE-400

References