Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 9:28 a.m.•17 views

CVE-2023-49809

Mattermost fails to handle a null request body in the /add endpoint, allowing a simple member to send a request with null request body to that endpoint and make it crash. After a few repetitions, the plugin is disabled...

6.5CVSS6.8AI score0.00642EPSS
SaveExploits0References1
Veracode
Veracode
•added 2024/03/18 6:00 p.m.•27 views

Uncontrolled Resource Consumption

Mattermost is vulnerable to Uncontrolled Resource Consumption. The vulnerability is due to Mattermost's failure to handle a null request body in the /add endpoint, which allows a simple member to send a request with a null request body to that endpoint, causing it to crash. After a few repetition...

6.5CVSS6.7AI score0.00642EPSS
SaveExploits0References3Affected Software1
Prion
Prion
•added 2023/12/12 9:15 a.m.•29 views

Design/Logic Flaw

Mattermost fails to handle a null request body in the /add endpoint, allowing a simple member to send a request with null request body to that endpoint and make it crash. After a few repetitions, the plugin is disabled...

4CVSS7AI score0.00642EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2023/12/12 8:20 a.m.•22 views

CVE-2023-49809 Todo plugin gets crashed and disabled by member

Mattermost fails to handle a null request body in the /add endpoint, allowing a simple member to send a request with null request body to that endpoint and make it crash. After a few repetitions, the plugin is disabled...

4.3CVSS6.6AI score
SaveExploits0References3
CVE
CVE
•added 2023/12/12 8:20 a.m.•63 views

CVE-2023-49809

Mattermost exposes a vulnerability CVE-2023-49809 where handling a null request body on the /add endpoint can crash the plugin after repeated requests. Connected sources corroborate that this affects Mattermost and results in a denial of service-like behavior (plugin disabled after several attemp...

6.5CVSS5.3AI score0.00642EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/12/12 12:00 a.m.•17 views

PT-2023-31365 · Unknown · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost affected versions not specified Description: The issue arises from Mattermost's failure to handle a null request body in the "/add" endpoint. This allows a simple member to send a request with a null request body to the endpoint,...

6.5CVSS6.2AI score0.00642EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/12 12:00 a.m.•5 views

CVE-2023-49809: Uncontrolled Resource Consumption

Mattermost fails to handle a null request body in the /add endpoint, allowing a simple member to send a request with null request body to that endpoint and make it crash. After a few repetitions, the plugin is disabled...

6.5CVSS6.6AI score0.00642EPSS
SaveExploits0References3
Rows per page
Query Builder