Lucene search
PRIOn knowledge basePRION:CVE-2023-49809HistoryDec 12, 2023 - 9:15 a.m.
Design/Logic Flaw
2023-12-1209:15:00
PRIOn knowledge base
www.prio-n.com
4
design flaw
logic flaw
mattermost
null request body
plugin crash
vulnerability
Mattermost fails to handle a null request body in the /add endpoint, allowing a simple member to send a request with null request body to that endpoint and make it crash. After a few repetitions, the plugin is disabled.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mattermost_server | le | 8.1.5 | |
| mattermost_server | ge | 9.0.0 | |
| mattermost_server | le | 9.1.0 |
References
Related
cve
cve
CVE-2023-49809
2023-12-12 09:15:09
osv
osv
CVE-2023-49809
2023-12-12 09:15:09
BIT-mattermost-2023-49809
2024-03-06 10:58:05
nvd
nvd
CVE-2023-49809
2023-12-12 09:15:09
veracode
veracode
Uncontrolled Resource Consumption
2024-03-18 18:00:42
cvelist
cvelist
CVE-2023-49809 Todo plugin gets crashed and disabled by member
2023-12-12 08:20:08