Lucene search
+L

12 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 9:28 a.m.•22 views

CVE-2023-49809

Mattermost fails to handle a null request body in the /add endpoint, allowing a simple member to send a request with null request body to that endpoint and make it crash. After a few repetitions, the plugin is disabled...

6.5CVSS6.6AI score0.00642EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/10/04 3:17 p.m.•12 views

CVE-2023-53576 null_blk: Always check queue mode setting from configfs

In the Linux kernel, the following vulnerability has been resolved: nullblk: Always check queue mode setting from configfs Make sure to check device queue mode in the nullvalidateconf and return error for NULLQRQ as we don't allow legacy I/O path, without this patch we get OOPs when queue mode is...

6.3AI score
SaveExploits0References8
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2023-53718

Malicious code in bioql PyPI...

6.5CVSS6.7AI score0.00642EPSS
SaveExploits0References1
Veracode
Veracode
•added 2024/03/18 6:00 p.m.•29 views

Uncontrolled Resource Consumption

Mattermost is vulnerable to Uncontrolled Resource Consumption. The vulnerability is due to Mattermost's failure to handle a null request body in the /add endpoint, which allows a simple member to send a request with a null request body to that endpoint, causing it to crash. After a few repetition...

6.5CVSS6.7AI score0.00642EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2023/12/12 9:15 a.m.•29 views

CVE-2023-49809

Mattermost fails to handle a null request body in the /add endpoint, allowing a simple member to send a request with null request body to that endpoint and make it crash. After a few repetitions, the plugin is disabled...

6.5CVSS0.00642EPSS
SaveExploits0References1
Prion
Prion
•added 2023/12/12 9:15 a.m.•36 views

Design/Logic Flaw

Mattermost fails to handle a null request body in the /add endpoint, allowing a simple member to send a request with null request body to that endpoint and make it crash. After a few repetitions, the plugin is disabled...

4CVSS7AI score0.00642EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/12/12 8:20 a.m.•74 views

CVE-2023-49809

Mattermost exposes a vulnerability CVE-2023-49809 where handling a null request body on the /add endpoint can crash the plugin after repeated requests. Connected sources corroborate that this affects Mattermost and results in a denial of service-like behavior (plugin disabled after several attemp...

6.5CVSS5.3AI score0.00642EPSS
SaveExploits0References1Affected Software1
osv_cve
osv_cve
•added 2023/12/12 8:20 a.m.•24 views

CVE-2023-49809 Todo plugin gets crashed and disabled by member

Mattermost fails to handle a null request body in the /add endpoint, allowing a simple member to send a request with null request body to that endpoint and make it crash. After a few repetitions, the plugin is disabled...

4.3CVSS6.6AI score0.00642EPSS
SaveExploits0References3
Mend
Mend
•added 2023/12/12 8:20 a.m.•8 views

CVE-2023-49809

Mattermost fails to handle a null request body in the /add endpoint, allowing a simple member to send a request with null request body to that endpoint and make it crash. After a few repetitions, the plugin is disabled...

6.5CVSS0.00642EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/12/12 12:00 a.m.•22 views

PT-2023-31365 · Unknown · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost affected versions not specified Description: The issue arises from Mattermost's failure to handle a null request body in the "/add" endpoint. This allows a simple member to send a request with a null request body to the endpoint,...

6.5CVSS6.2AI score0.00642EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/12 12:00 a.m.•8 views

CVE-2023-49809: Uncontrolled Resource Consumption

Mattermost fails to handle a null request body in the /add endpoint, allowing a simple member to send a request with null request body to that endpoint and make it crash. After a few repetitions, the plugin is disabled...

6.5CVSS6.6AI score0.00642EPSS
SaveExploits0References3
NVD
NVD
•added 2004/12/31 5:00 a.m.•25 views

CVE-2004-1887

Ada Image Server ImgSvr 0.4 allows remote attackers to view directories or download files via an HTTP request with a trailing %00 null...

5CVSS6.7AI score0.03821EPSS
SaveExploits3References7
Rows per page
Query Builder