Veracode Vulnerability DatabaseVERACODE:26216Denial Of Service (DoS)
0.001 Low
EPSS
Percentile
34.1%
github.com/mattermost/mattermost-server is vulnerable to denial of service. The vulnerability exists in multiple functions because of sending large autoresponder messages which allows an attacker to crash the application via malicious input.
References
github.com/advisories/GHSA-5jph-wrq7-v9hf
github.com/mattermost/mattermost-server/commit/3341b6c2baaa1dc0981f2b27e4027522066be28c
github.com/mattermost/mattermost-server/commit/64021bf5c4810546cd9a8aa22d263b0365e98d54
github.com/mattermost/mattermost-server/commit/8266735ca6ed35c5e983e11416db6619ef067102
github.com/mattermost/mattermost-server/commit/8af1446b88a3af9f114a140e619a4d64fab7e70a
github.com/mattermost/mattermost-server/pull/20900
hackerone.com/reports/1680241
mattermost.com/security-updates/
www.mail-archive.com/[email protected]&q=subject:%22%5C%5BGit%5C%5D%5C%5Bsecurity%5C-tracker%5C-team%5C%2Fsecurity%5C-tracker%5C%5D%5C%5Bmaster%5C%5D+automatic+update%22&o=newest&f=1
Related
