TS3 Manager Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in TS3 Manager versions through 2.2.1. This vulnerability allows an unauthenticated user to crash the application by sending specially crafted Unicode input. The issue arises when Unicode tag characters are entered into the Server field on the login page. The application improperly processes these characters during the conversion to ASCII, leading to an unhandled exception that crashes the application within four to five seconds of submission.

Impact

Exploitation of this vulnerability causes the application to crash, disrupting service availability.

Reproduction

To reproduce this vulnerability, enter Unicode tag characters into the Server field of the login page. The application will crash within a few seconds after submission.

Remediation

Users are advised to upgrade to TS3 Manager version 2.2.2 or later.