CVE-2015-9548

An issue was discovered in Mattermost Server before 1.2.0. It allows attackers to cause a denial of service memory consumption via a small compressed file that has a large size when uncompressed...

CVE-2015-9548

An issue was discovered in Mattermost Server before 1.2.0. It allows attackers to cause a denial of service memory consumption via a small compressed file that has a large size when uncompressed...

CVE-2019-20880

An issue was discovered in Mattermost Server before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. It allows attackers to cause a denial of service memory consumption via OpenGraph...

Command injection

An issue was discovered in Mattermost Server before 5.7, 5.6.3, 5.5.2, and 4.10.5. It allows attackers to cause a denial of service memory consumption via an outgoing webhook or a slash command integration...

CVE-2018-21250

An issue was discovered in Mattermost Server before 5.2.2, 5.1.2, and 4.10.4. It allows remote attackers to cause a denial of service memory consumption via crafted image dimensions...

CVE-2018-21250

Mattermost Server is affected before versions 5.2.2, 5.1.2, and 4.10.4. A remote attacker can cause a denial of service by supplying crafted image dimensions, leading to memory consumption. The issue is documented across multiple sources (CVE-2018-21250). No remediation details are provided in th...

CVE-2019-20888

Mattermost Server contains a denial-of-service vulnerability (memory consumption) impacting versions before 5.7, 5.6.3, 5.5.2, and 4.10.5. The issue can be triggered by processing inputs from outgoing webhooks or slash command integrations. Red Hat and CNVD entries corroborate the affected versio...

CVE-2019-20880

An issue was discovered in Mattermost Server before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. It allows attackers to cause a denial of service memory consumption via OpenGraph...

CVE-2019-20880

Mattermost Server vulnerable to denial-of-service via OpenGraph handling. Affected versions: before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. Root cause described as OpenGraph processing leading to memory consumption (DoS). No exploitation details or attacker vectors provided in the documents. No remediat...

CVE-2020-14152

In IJG JPEG aka libjpeg before 9d, jpegmemavailable in jmemnobs.c in djpeg does not honor the maxmemorytouse setting, possibly causing excessive memory consumption...

CVE-2019-20845

An issue was discovered in Mattermost Server before 5.18.0. It allows attackers to cause a denial of service memory consumption via a large Slack import...

CVE-2019-20845

An issue was discovered in Mattermost Server before 5.18.0. It allows attackers to cause a denial of service memory consumption via a large Slack import...

Information disclosure

An issue was discovered in Mattermost Server before 5.18.0. It allows attackers to cause a denial of service memory consumption via a large Slack import...

CVE-2019-20845

An issue was discovered in Mattermost Server before 5.18.0. It allows attackers to cause a denial of service memory consumption via a large Slack import...

PT-2020-8893

Name of the Vulnerable Software and Affected Versions Mattermost Server versions prior to 5.2.2 Mattermost Server versions prior to 5.1.2 Mattermost Server versions prior to 4.10.4 Description The issue allows remote attackers to cause a denial of service, specifically memory consumption, via...

CVE-2015-9548: Uncontrolled Resource Consumption

An issue was discovered in Mattermost Server before 1.2.0. It allows attackers to cause a denial of service memory consumption via a small compressed file that has a large size when uncompressed...

PT-2020-10808

Name of the Vulnerable Software and Affected Versions Mattermost Server versions prior to 5.18.0 Description The issue allows attackers to cause a denial of service, specifically memory consumption, by utilizing a large Slack import. Recommendations For versions prior to 5.18.0, update to version...

CVE-2019-20888: Missing Release of Memory after Effective Lifetime

An issue was discovered in Mattermost Server before 5.7, 5.6.3, 5.5.2, and 4.10.5. It allows attackers to cause a denial of service memory consumption via an outgoing webhook or a slash command integration...

PT-2020-10844

Name of the Vulnerable Software and Affected Versions Mattermost Server versions prior to 5.8.0 Mattermost Server versions prior to 5.7.2 Mattermost Server versions prior to 5.6.5 Mattermost Server versions prior to 4.10.7 Description An issue in Mattermost Server allows attackers to cause a deni...

CVE-2018-21250: Uncontrolled Resource Consumption

An issue was discovered in Mattermost Server before 5.2.2, 5.1.2, and 4.10.4. It allows remote attackers to cause a denial of service memory consumption via crafted image dimensions...