Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-65347
HistoryJul 18, 2022 - 12:00 a.m.

Mattermost Resource Management Error Vulnerability (CNVD-2022-65347)

2022-07-1800:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
mattermost
resource management
vulnerability
slack import
file size limit
rest api
server crash

0.001 Low

EPSS

Percentile

36.2%

Mattermost is an open source collaboration platform from Mattermost, Inc. Mattermost 6.7.0 and earlier versions are vulnerable to a resource management error, which stems from the inability of the Slack import feature to properly limit the size of imported files, and can be exploited to import large files via the Slack import REST API to crash the server. crash.

CPENameOperatorVersion
mattermost mattermostle6.7.0

0.001 Low

EPSS

Percentile

36.2%

Related for CNVD-2022-65347