Количество 3
Количество 3
CVE-2026-3114
Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to validate decompressed archive entry sizes during file extraction which allows authenticated users with file upload permissions to cause a denial of service via crafted zip archives containing highly compressed entries (zip bombs) that exhaust server memory.. Mattermost Advisory ID: MMSA-2026-00598
CVE-2026-3114
Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2 ...
GHSA-vhgh-g7x8-4rx8
Mattermost doesn't validate decompressed archive entry sizes during file extraction
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-3114 Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to validate decompressed archive entry sizes during file extraction which allows authenticated users with file upload permissions to cause a denial of service via crafted zip archives containing highly compressed entries (zip bombs) that exhaust server memory.. Mattermost Advisory ID: MMSA-2026-00598 | CVSS3: 6.5 | 0% Низкий | 5 месяцев назад |
| CVE-2026-3114 Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2 ... | CVSS3: 6.5 | 0% Низкий | 5 месяцев назад |
| GHSA-vhgh-g7x8-4rx8 Mattermost doesn't validate decompressed archive entry sizes during file extraction | CVSS3: 6.5 | 0% Низкий | 5 месяцев назад |
Уязвимостей на страницу