CVE-2022-1333 A specifically drafted Playbook could trigger large amount of webhook requests leading to Denial of Service

Mattermost Playbooks plugin v1.24.0 and earlier fails to properly check the limit on the number of webhooks, which allows authenticated and authorized users to create a specifically drafted Playbook which could trigger a large amount of webhook requests leading to Denial of Service...

CVE-2022-1333 A specifically drafted Playbook could trigger large amount of webhook requests leading to Denial of Service

Mattermost Playbooks plugin v1.24.0 and earlier fails to properly check the limit on the number of webhooks, which allows authenticated and authorized users to create a specifically drafted Playbook which could trigger a large amount of webhook requests leading to Denial of Service...

CVE-2022-1333

Mattermost Playbooks plugin vulnerability CVE-2022-1333 affects version 1.24.0 and earlier. The issue stems from an insufficient check on the allowed number of webhooks, enabling an authenticated and authorized user to craft a Playbook that can generate a high volume of webhook requests and cause...

CVE-2022-1333

Mattermost Playbooks plugin v1.24.0 and earlier fails to properly check the limit on the number of webhooks, which allows authenticated and authorized users to create a specifically drafted Playbook which could trigger a large amount of webhook requests leading to Denial of Service...

CVE-2022-1333 A specifically drafted Playbook could trigger large amount of webhook requests leading to Denial of Service

Mattermost Playbooks plugin v1.24.0 and earlier fails to properly check the limit on the number of webhooks, which allows authenticated and authorized users to create a specifically drafted Playbook which could trigger a large amount of webhook requests leading to Denial of Service...

CVE-2022-1337

The image proxy component in Mattermost version 6.4.1 and earlier allocates memory for multiple copies of a proxied image, which allows an authenticated attacker to crash the server via links to very large image files...

CVE-2022-1337 OOM DoS in Mattermost image proxy

The image proxy component in Mattermost version 6.4.1 and earlier allocates memory for multiple copies of a proxied image, which allows an authenticated attacker to crash the server via links to very large image files...

CVE-2022-1337 OOM DoS in Mattermost image proxy

The image proxy component in Mattermost version 6.4.1 and earlier allocates memory for multiple copies of a proxied image, which allows an authenticated attacker to crash the server via links to very large image files...

CVE-2022-1337

Mattermost’s image proxy component in version 6.4.1 and earlier allocates memory for multiple copies of a proxied image, enabling an authenticated attacker to crash the server by accessing links to very large image files. The consolidated set of sources (CVE-2022-1337 entries across NVD, Red Hat,...

CVE-2022-1337 OOM DoS in Mattermost image proxy

The image proxy component in Mattermost version 6.4.1 and earlier allocates memory for multiple copies of a proxied image, which allows an authenticated attacker to crash the server via links to very large image files...

CVE-2022-1333: Allocation of Resources Without Limits or Throttling

Mattermost Playbooks plugin v1.24.0 and earlier fails to properly check the limit on the number of webhooks, which allows authenticated and authorized users to create a specifically drafted Playbook which could trigger a large amount of webhook requests leading to Denial of Service...

Mattermost 安全漏洞

A denial-of-service vulnerability exists in Mattermost Playbooks plugin version 1.24.0 and earlier, which stems from a limit on the number of webhooks that are not properly checked, and can be exploited by an authenticated attacker to trigger a denial of service by creating a specially drafted...

CVE-2022-1332: Exposure of Sensitive Information to an Unauthorized Actor

One of the API in Mattermost version 6.4.1 and earlier fails to properly protect the permissions, which allows the authenticated members with restricted custom admin role to bypass the restrictions and view the server logs and server config.json file contents...

CVE-2022-1337: Uncontrolled Resource Consumption

The image proxy component in Mattermost version 6.4.1 and earlier allocates memory for multiple copies of a proxied image, which allows an authenticated attacker to crash the server via links to very large image files...

PT-2022-13806

Name of the Vulnerable Software and Affected Versions Mattermost Playbooks plugin versions 1.24.0 and earlier Description The issue arises from the Mattermost Playbooks plugin's failure to properly check the limit on the number of webhooks. This allows authenticated and authorized users to create...

Mattermost 资源管理错误漏洞

Mattermost is an open source collaboration platform from Mattermost, Inc. A resource management error vulnerability exists in Mattermost 6.4.1 and earlier versions, which stems from an image proxy component that allocates memory for multiple copies of a proxy image and can be exploited by an...

Mattermost 安全漏洞

Mattermost is an open source collaboration platform from Mattermost, Inc. An authorization issue vulnerability exists in Mattermost 6.4.1 and earlier versions, which stems from an API that fails to properly protect permissions and can be exploited by an authenticated attacker to bypass restrictio...

Mattermost has an unspecified vulnerability (CNVD-2022-22660)

A security vulnerability exists in Mattermost, an open source collaboration platform from Mattermost, a US-based company, which allows system administrators to combine two different permissions/features in a way that allows them to override certain restricted configurations e.g. EnableUploads. No...

Mattermost has an unspecified vulnerability (CNVD-2022-22661)

A security vulnerability exists in Mattermost, an open source collaboration platform from Mattermost Inc. in the U.S. The vulnerability allows a registered user with special privileges to invite guest users to inject unescaped HTML content into an email invitation. No details of the vulnerability...

CVE-2022-1003

One of the API in Mattermost version 6.3.0 and earlier fails to properly protect the permissions, which allows the system administrators to combine the two distinct privileges/capabilities in a way that allows them to override certain restricted configurations like EnableUploads...