CVE-2023-5330

Mattermost fails to enforce a limit for the size of the cache entry for OpenGraph data allowing an attacker to send a specially crafted request to the /api/v4/opengraph filling the cache and turning the server unavailable...

Design/Logic Flaw

Mattermost fails to enforce a limit for the size of the cache entry for OpenGraph data allowing an attacker to send a specially crafted request to the /api/v4/opengraph filling the cache and turning the server unavailable...

CVE-2023-5330 Denial of Service via Opengraph Data Cache

Mattermost fails to enforce a limit for the size of the cache entry for OpenGraph data allowing an attacker to send a specially crafted request to the /api/v4/opengraph filling the cache and turning the server unavailable...

CVE-2023-5330

Mattermost is reported vulnerable to a Denial of Service via the OpenGraph cache. The issue stems from failing to enforce a limit on the size of cache entries for OpenGraph data, allowing an attacker to send crafted requests to /api/v4/opengraph that can fill the cache and render the server unava...

CVE-2023-5330 Denial of Service via Opengraph Data Cache

Mattermost fails to enforce a limit for the size of the cache entry for OpenGraph data allowing an attacker to send a specially crafted request to the /api/v4/opengraph filling the cache and turning the server unavailable...

Mattermost Security Vulnerabilities

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a security vulnerability that stems from a failure to enforce a limit on the size of cache entries when handling the OpenGraph data cache, which allows an attacker to send a...

PT-2023-32049 · Unknown · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost affected versions not specified Description: The issue arises from the failure to enforce a limit for the size of the cache entry for OpenGraph data. This allows an attacker to send a specially crafted request to the...

CVE-2023-5330: Uncontrolled Resource Consumption

Mattermost fails to enforce a limit for the size of the cache entry for OpenGraph data allowing an attacker to send a specially crafted request to the /api/v4/opengraph filling the cache and turning the server unavailable...

Artesãos SEOTools 输入验证错误漏洞

SEOTools is an Artesãos open source SEO tool for Laravel and Lumen. Artesãos SEOTools before 0.17.2 version of the input validation error vulnerability , the vulnerability stems from the file OpenGraph.php function makeTag problem , the operation of the parameter value will lead to open redirect...

LY Corporation: SSRF occurrence in website preview used by LINE Official Account Manager (https://manager.line.biz)

LINE Official Account Manager https://manager.line.biz uses PagePoker to provide website previews. Here it was not properly validated against the Opengraph image tag target, which could point to an internal network resource...

CVE-2017-18882

An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS can occur via OpenGraph data...

CVE-2017-18882

An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS can occur via OpenGraph data...

Cross site scripting

An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS can occur via OpenGraph data...

CVE-2017-18882

An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS can occur via OpenGraph data...

CVE-2017-18882

Mattermost Server contains a cross-site scripting (XSS) vulnerability (CVE-2017-18882) affecting versions prior to 4.3.0, 4.2.1, and 4.1.2. Descriptions across sources attribute the issue to improper handling/validation of OpenGraph data supplied by the user, enabling an attacker to inject and ex...

CVE-2019-20880

An issue was discovered in Mattermost Server before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. It allows attackers to cause a denial of service memory consumption via OpenGraph...

CVE-2019-20880

An issue was discovered in Mattermost Server before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. It allows attackers to cause a denial of service memory consumption via OpenGraph...

Design/Logic Flaw

An issue was discovered in Mattermost Server before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. It allows attackers to cause a denial of service memory consumption via OpenGraph...

CVE-2019-20880

Mattermost Server vulnerable to denial-of-service via OpenGraph handling. Affected versions: before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. Root cause described as OpenGraph processing leading to memory consumption (DoS). No exploitation details or attacker vectors provided in the documents. No remediat...

CVE-2019-20880

An issue was discovered in Mattermost Server before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. It allows attackers to cause a denial of service memory consumption via OpenGraph...