Lucene search
+L

1 matches found

OSV
OSV
added 2025/12/17 6:14 p.m.7 views

CVE-2025-12689 DoS in Calls plugin via malformed UTF-8 in WebSocket request

Mattermost versions 11.0.x = 11.0.4, 10.12.x = 10.12.2, 10.11.x = 10.11.6 fail to check WebSocket request field for proper UTF-8 format, which allows attacker to crash Calls plug-in via sending malformed request...

6.5CVSS7.2AI score0.0025EPSS
SaveExploits0References3
Rows per page
Query Builder