Описание
Mattermost version 7.1.x and earlier fails to sufficiently process a specifically crafted GIF file when it is uploaded while drafting a post, which allows authenticated users to cause resource exhaustion while processing the file, resulting in server-side Denial of Service.
Ссылки
- ExploitThird Party Advisory
- Vendor Advisory
- ExploitThird Party Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 7.2.0 (исключая)
cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*
EPSS
Процентиль: 65%
0.00482
Низкий
3.1 Low
CVSS3
6.5 Medium
CVSS3
Дефекты
CWE-400
CWE-434
Связанные уязвимости
CVSS3: 3.1
debian
больше 3 лет назад
Mattermost version 7.1.x and earlier fails to sufficiently process a s ...
CVSS3: 6.5
github
больше 3 лет назад
Mattermost subject to Denial of Service via upload of special GIF
EPSS
Процентиль: 65%
0.00482
Низкий
3.1 Low
CVSS3
6.5 Medium
CVSS3
Дефекты
CWE-400
CWE-434