Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-94483
HistoryNov 30, 2023 - 12:00 a.m.

Mattermost Denial of Service Vulnerability (CNVD-2023-9448306)

2023-11-3000:00:00
China National Vulnerability Database
www.cnvd.org.cn
3
mattermost
collaboration platform
denial of service
vulnerability
cnvd-2023-9448306
attacker
resources
crafted strings
mattermost boards

6.7 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.0%

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a denial of service vulnerability that stems from an inability to properly limit the characters allowed in different fields of a block in Mattermost Boards, which can be exploited by an attacker to consume excessive resources by patching the fields of a block with specially crafted strings, resulting in a denial of service.

6.7 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.0%