CVE-2022-1333

2022-04-1318:15:09

Google

osv.dev

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.0%

JSON

Mattermost Playbooks plugin v1.24.0 and earlier fails to properly check the limit on the number of webhooks, which allows authenticated and authorized users to create a specifically drafted Playbook which could trigger a large amount of webhook requests leading to Denial of Service.

CPENameOperatorVersion
mattermost-plugin-playbookseq1.15.0
mattermost-plugin-playbookseq0.7.0-alpha.4
mattermost-plugin-playbookseq0.4.0-alpha.5
mattermost-plugin-playbookseq0.6.0-alpha.3
mattermost-plugin-playbookseq1.16.0-rc1
mattermost-plugin-playbookseqclient/v0.3.0
mattermost-plugin-playbookseq0.5.0-alpha.1
mattermost-plugin-playbookseq1.0.0
mattermost-plugin-playbookseq0.4.0
mattermost-plugin-playbookseq1.0.0-alpha.3

Name	Operator	Version
mattermost-plugin-playbooks	eq	1.15.0
mattermost-plugin-playbooks	eq	0.7.0-alpha.4
mattermost-plugin-playbooks	eq	0.4.0-alpha.5
mattermost-plugin-playbooks	eq	0.6.0-alpha.3
mattermost-plugin-playbooks	eq	1.16.0-rc1
mattermost-plugin-playbooks	eq	client/v0.3.0
mattermost-plugin-playbooks	eq	0.5.0-alpha.1
mattermost-plugin-playbooks	eq	1.0.0
mattermost-plugin-playbooks	eq	0.4.0
mattermost-plugin-playbooks	eq	1.0.0-alpha.3

Rows per page:

1-10 of 921

References

mattermost.com/security-updates/