Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jqq9-5hrp-9jg8

Опубликовано: 19 янв. 2022
Источник: github
Github: Не прошло ревью

Описание

Mattermost 6.2 and earlier fails to sufficiently process a specifically crafted GIF file when it is uploaded while drafting a post, which allows authenticated users to cause resource exhaustion while processing the file, resulting in server-side Denial of Service.

Mattermost 6.2 and earlier fails to sufficiently process a specifically crafted GIF file when it is uploaded while drafting a post, which allows authenticated users to cause resource exhaustion while processing the file, resulting in server-side Denial of Service.

EPSS

Процентиль: 58%
0.0037
Низкий

Дефекты

CWE-400

Связанные уязвимости

CVSS3: 4.3
nvd
больше 3 лет назад

Mattermost 6.2 and earlier fails to sufficiently process a specifically crafted GIF file when it is uploaded while drafting a post, which allows authenticated users to cause resource exhaustion while processing the file, resulting in server-side Denial of Service.

CVSS3: 4.3
debian
больше 3 лет назад

Mattermost 6.2 and earlier fails to sufficiently process a specificall ...

EPSS

Процентиль: 58%
0.0037
Низкий

Дефекты

CWE-400