CVE-2024-22091

CVE-2024-22091 affects Mattermost servers where the path of requests containing user inputs is not length-limited. The root cause is an insufficient limit on the size of request paths, which can trigger excessive resource consumption and potentially cause a DoS. Affected versions include Mattermo...

CVE-2024-22091 Excessive resource consumption due to lack to request path size limits

Mattermost versions 8.1.x = 8.1.10, 9.6.x = 9.6.0, 9.5.x = 9.5.2 and 8.1.x = 8.1.11 fail to limit the size of a request path that includes user inputs which allows an attacker to cause excessive resource consumption, possibly leading to a DoS via sending large request paths...