~ / search / GHSA-5mh6-p63g-3mv5

GHSA-5mh6-p63g-3mv5

Mattermost Server is vulnerable to a Denial of Service attack through `invite_people` command

Source: GitHub Advisory Database (reviewed) High CVE-2018-21258

Packages

EcosystemPackageAffectedFixed in
Go github.com/mattermost/mattermost-server < 5.1.0 5.1.0

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in Mattermost Server before 5.1.0. It allows attackers to cause a denial of service via the invite_people slash command.

References

External links from the advisory. They lead to third-party sites.