Lucene search
+L

1 matches found

osv_ghsa
osv_ghsa
•added 2026/04/09 12:31 p.m.•36 views

GHSA-X274-8QFC-HRGF Mattermost MS Teams plugin doesn't limit the request body size on the /lifecycle webhook endpoint

Mattermost Plugins versions =2.3.1 fail to limit the request body size on the /lifecycle webhook endpoint which allows an authenticated attacker to cause memory exhaustion and denial of service via sending an oversized JSON payload. Mattermost Advisory ID: MMSA-2026-00610...

3.7CVSS8.2AI score0.00311EPSS
SaveExploits0References5
Rows per page
Query Builder