Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jqq9-5hrp-9jg8

Опубликовано: 19 янв. 2022
Источник: github
Github: Не прошло ревью

Описание

Mattermost 6.2 and earlier fails to sufficiently process a specifically crafted GIF file when it is uploaded while drafting a post, which allows authenticated users to cause resource exhaustion while processing the file, resulting in server-side Denial of Service.

Mattermost 6.2 and earlier fails to sufficiently process a specifically crafted GIF file when it is uploaded while drafting a post, which allows authenticated users to cause resource exhaustion while processing the file, resulting in server-side Denial of Service.

EPSS

Процентиль: 69%
0.00603
Низкий

Дефекты

CWE-400

Связанные уязвимости

CVSS3: 4.3
nvd
почти 4 года назад

Mattermost 6.2 and earlier fails to sufficiently process a specifically crafted GIF file when it is uploaded while drafting a post, which allows authenticated users to cause resource exhaustion while processing the file, resulting in server-side Denial of Service.

CVSS3: 4.3
debian
почти 4 года назад

Mattermost 6.2 and earlier fails to sufficiently process a specificall ...

EPSS

Процентиль: 69%
0.00603
Низкий

Дефекты

CWE-400