CVE-2022-35221: Teamplus Team+ Pro

Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days.

Teamplus Pro community discussion has an ‘allocation of resource without limits or throttling’ vulnerability on thread subject field. A remote attacker with general user privilege posting a thread subject with large content can cause the server to allocate too much memory, leading to missing partial post content and disrupt partial service.

Affected products

• Teamplus Team+ Pro: up to and including 3.011.6.0.1

Published 2022-08-02. Last modified 2026-06-17.