Denial Of Service (DoS)

github.com/mattermost/mattermost-server is vulnerable to Denial of Service DoS. The vulnerability due to there is no proper validation or check on the length when setting the title in a run checklist in Playbooks. An attacker can send a specially crafted request and potentially leads to crash of...

Mattermost Server Resource Exhaustion

Resource Exhaustion in Mattermost Server versions 8.1.x before 8.1.10 fails to limit the size of the payload that can be read and parsed allowing an attacker to send a very large email payload and crash the server...

GHSA-QQC8-RV37-79Q5 Mattermost Server Resource Exhaustion

Resource Exhaustion in Mattermost Server versions 8.1.x before 8.1.10 fails to limit the size of the payload that can be read and parsed allowing an attacker to send a very large email payload and crash the server...

CVE-2024-2445 Reflected XSS in Mattermost Jira plugin

Mattermost Jira plugin versions shipped with Mattermost versions 8.1.x before 8.1.10, 9.2.x before 9.2.6, 9.3.x before 9.3.2, and 9.4.x before 9.4.3 fail to escape user-controlled outputs when generating HTML pages, which allows an attacker to perform reflected cross-site scripting attacks agains...

CVE-2024-28053

Resource Exhaustion in Mattermost Server versions 8.1.x before 8.1.10 fails to limit the size of the payload that can be read and parsed allowing an attacker to send a very large email payload and crash the server...

CVE-2024-28053 Resource Exhaustion via the Invitation Feature

Resource Exhaustion in Mattermost Server versions 8.1.x before 8.1.10 fails to limit the size of the payload that can be read and parsed allowing an attacker to send a very large email payload and crash the server...

CVE-2024-28053 Resource Exhaustion via the Invitation Feature

Resource Exhaustion in Mattermost Server versions 8.1.x before 8.1.10 fails to limit the size of the payload that can be read and parsed allowing an attacker to send a very large email payload and crash the server...

CVE-2024-28053

CVE-2024-28053 – Mattermost Server : A resource-exhaustion flaw in Mattermost Server 8.1.x prior to 8.1.10 allows an attacker to read/parse an email payload without limiting its size, enabling a very large payload to crash the server. Affected are Mattermost Server 8.1.x versions before 8.1.10. T...

CVE-2024-28053 Resource Exhaustion via the Invitation Feature

Resource Exhaustion in Mattermost Server versions 8.1.x before 8.1.10 fails to limit the size of the payload that can be read and parsed allowing an attacker to send a very large email payload and crash the server...

PT-2024-22239 · Mattermost · Mattermost Server

Name of the Vulnerable Software and Affected Versions: Mattermost Server versions 8.1.x before 8.1.10 Description: The issue is related to resource exhaustion, where the server fails to limit the size of the payload that can be read and parsed, allowing an attacker to send a very large email...

Mattermost Server Denial of Service Vulnerability (CNVD-2024-26110)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A denial of service vulnerability exists in Mattermost Server, which can be exploited by an attacker to cause the server to crash...

Mattermost 安全漏洞

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A denial of service vulnerability exists in Mattermost Server, which can be exploited by an attacker to cause the server to crash...

Mattermost Server 5.34.x < 7.1.9 / 7.2.x < 7.8.4 / 7.9.x < 7.9.3 / 7.10.0 (MMSA-2023-00159)

The version of Mattermost Server installed on the remote host is prior to 7.1.9, 7.8.4, or 7.9.3 / 7.10.0. It is, therefore, affected by a vulnerability as referenced in the MMSA-2023-00159 advisory. - Mattermost fails to normalize UTF confusable characters when determining if a preview should be...

BIT-MATTERMOST-2020-14447

An issue was discovered in Mattermost Server before 5.23.0. Large webhook requests allow attackers to cause a denial of service infinite loop, aka MMSA-2020-0021...

BIT-MATTERMOST-2020-14448

An issue was discovered in Mattermost Server before 5.23.0. Automatic direct message replies allow attackers to cause a denial of service infinite loop, aka MMSA-2020-0020...

BIT-MATTERMOST-2020-14452

An issue was discovered in Mattermost Server before 5.21.0. mmctl allows directory traversal via HTTP, aka MMSA-2020-0014...

BIT-MATTERMOST-2020-14453

An issue was discovered in Mattermost Server before 5.21.0. Socket read operations are not appropriately restricted, which allows attackers to cause a denial of service, aka MMSA-2020-0005...

BIT-MATTERMOST-2020-14457

An issue was discovered in Mattermost Server before 5.20.0. Non-members can receive broadcasted team details via the updateteam WebSocket event, aka MMSA-2020-0012...

BIT-MATTERMOST-2022-0903

A call stack overflow bug in the SAML login feature in Mattermost server in versions up to and including 6.3.2 allows an attacker to crash the server via submitting a maliciously crafted POST body...

BIT-MATTERMOST-2022-0904

A stack overflow bug in the document extractor in Mattermost Server in versions up to and including 6.3.2 allows an attacker to crash the server via submitting a maliciously crafted Apple Pages document...