Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3cx3-rw7f-7q37

Опубликовано: 16 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.8

Описание

Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to handle incorrectly reported array lengths which allows malicious user to cause OOM errors and crash the server via sending corrupted msgpack frames within websocket messages to calls plugin. Mattermost Advisory ID: MMSA-2025-00537

Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to handle incorrectly reported array lengths which allows malicious user to cause OOM errors and crash the server via sending corrupted msgpack frames within websocket messages to calls plugin. Mattermost Advisory ID: MMSA-2025-00537

EPSS

Процентиль: 33%
0.00136
Низкий

5.8 Medium

CVSS3

Дефекты

CWE-1287

Связанные уязвимости

CVSS3: 5.8
nvd
16 дней назад

Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to handle incorrectly reported array lengths which allows malicious user to cause OOM errors and crash the server via sending corrupted msgpack frames within websocket messages to calls plugin. Mattermost Advisory ID: MMSA-2025-00537

CVSS3: 5.8
debian
16 дней назад

Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10. ...

EPSS

Процентиль: 33%
0.00136
Низкий

5.8 Medium

CVSS3

Дефекты

CWE-1287