Lucene search
HistoryNov 23, 2022 - 7:15 a.m.
CVE-2022-4045
mattermost
denial-of-service
api
vulnerability
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
35.0%
A denial-of-service vulnerability in the Mattermost allows an authenticated user to crash the server via multiple requests to one of the API endpoints which could fetch a large amount of data.
Affected configurations
Node
mattermostmattermostMatch-
References
Related
nessus
nessus
Mattermost Server < 7.4.0 DoS (MMSA-2022-00124)
2022-12-02 00:00:00
github
github
Denial of service in Mattermost
2022-11-23 09:30:24
prion
prion
Denial of service
2022-11-23 07:15:00
cve
cve
CVE-2022-4045
2022-11-23 07:15:10
veracode
veracode
Denial Of Service (DOS)
2022-11-25 05:53:44
cvelist
cvelist
osv
osv
Denial of service in Mattermost
2022-11-23 09:30:24
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
35.0%
Related for NVD:CVE-2022-4045