~ / search / GHSA-5jph-wrq7-v9hf

GHSA-5jph-wrq7-v9hf

Denial of service in Mattermost

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-4044

Packages

EcosystemPackageAffectedFixed in
Go github.com/mattermost/mattermost-server < 7.1.4 7.1.4
Go github.com/mattermost/mattermost-server >= 7.2.0, < 7.2.1 7.2.1
Go github.com/mattermost/mattermost-server >= 7.3.0, < 7.3.1 7.3.1

Details

As written in the advisory (Markdown source, shown as plain text).

A denial-of-service vulnerability in Mattermost allows an authenticated user to crash the server via multiple large autoresponder messages.

References

External links from the advisory. They lead to third-party sites.