Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/03/26 6:31 p.m.10 views

Mattermost doesn't validate decompressed archive entry sizes during file extraction

Mattermost versions 11.4.x = 11.4.0, 11.3.x = 11.3.1, 11.2.x = 11.2.3, 10.11.x = 10.11.11 fail to validate decompressed archive entry sizes during file extraction which allows authenticated users with file upload permissions to cause a denial of service via crafted zip archives containing highly...

6.5CVSS5.9AI score0.00343EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder