Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2024-09865
HistoryFeb 22, 2024 - 12:00 a.m.

Mattermost Resource Management Error Vulnerability (CNVD-2024-09865)

2024-02-2200:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
mattermost
resource management
vulnerability
custom emoticons
attacker
crash

7 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a resource management error vulnerability that stems from an inability to check for the presence of custom emoticons when sending it to a post or to limit the number of custom emoticons allowed to be added to a post, which could be exploited by an attacker to send a large number of non-existing custom emoticons in a post and cause a crash.

7 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%