Описание
Mattermost version 7.0.x and earlier fails to sufficiently limit the in-memory sizes of concurrently uploaded JPEG images, which allows authenticated users to cause resource exhaustion on specific system configurations, resulting in server-side Denial of Service.
Ссылки
- Permissions Required
- Vendor Advisory
- Permissions Required
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 7.1.0 (исключая)
cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*
EPSS
Процентиль: 72%
0.00725
Низкий
3.1 Low
CVSS3
6.5 Medium
CVSS3
Дефекты
CWE-400
CWE-770
Связанные уязвимости
CVSS3: 3.1
debian
больше 3 лет назад
Mattermost version 7.0.x and earlier fails to sufficiently limit the i ...
CVSS3: 6.5
github
больше 3 лет назад
Mattermost version 7.0.x and earlier fails to sufficiently limit the in-memory sizes of concurrently uploaded JPEG images, which allows authenticated users to cause resource exhaustion on specific system configurations, resulting in server-side Denial of Service.
EPSS
Процентиль: 72%
0.00725
Низкий
3.1 Low
CVSS3
6.5 Medium
CVSS3
Дефекты
CWE-400
CWE-770