BIT-MATTERMOST-2020-14448

An issue was discovered in Mattermost Server before 5.23.0. Automatic direct message replies allow attackers to cause a denial of service infinite loop, aka MMSA-2020-0020...

Code injection

An issue was discovered in Mattermost Server before 5.23.0. Automatic direct message replies allow attackers to cause a denial of service infinite loop, aka MMSA-2020-0020...

CVE-2020-14448

An issue was discovered in Mattermost Server before 5.23.0. Automatic direct message replies allow attackers to cause a denial of service infinite loop, aka MMSA-2020-0020...

CVE-2020-14448

Mattermost Server before 5.23.0 has a vulnerability in automatic direct message (DM) replies that can be exploited to cause a denial of service via an infinite loop (CVE-2020-14448). Affected component: image-free DM reply handling in Mattermost Server. Underlying cause: the issue arises from how...