Mattermost Uncontrolled Resource Consumption vulnerability

2023-11-2712:30:55

Google

osv.dev

mattermost

resource consumption

server logs

attack

endpoints

vulnerability

0.0005 Low

EPSS

Percentile

15.9%

JSON

Mattermost fails to limit the log size of server logs allowing an attacker sending specially crafted requests to different endpoints to potentially overflow the log.

CPENameOperatorVersion
github.com/mattermost/mattermost/server/v8ge9.1.0
github.com/mattermost/mattermost/server/v8lt8.1.4
github.com/mattermost/mattermost/server/v8lt9.0.2
github.com/mattermost/mattermost-server/v6lt7.8.13
github.com/mattermost/mattermost/server/v8lt9.1.1
github.com/mattermost/mattermost/server/v8ge9.0.0

Name	Operator	Version
github.com/mattermost/mattermost/server/v8	ge	9.1.0
github.com/mattermost/mattermost/server/v8	lt	8.1.4
github.com/mattermost/mattermost/server/v8	lt	9.0.2
github.com/mattermost/mattermost-server/v6	lt	7.8.13
github.com/mattermost/mattermost/server/v8	lt	9.1.1
github.com/mattermost/mattermost/server/v8	ge	9.0.0