~ / search / GHSA-qqc8-rv37-79q5

GHSA-qqc8-rv37-79q5

Mattermost Server Resource Exhaustion

Source: GitHub Advisory Database (reviewed) Low CVE-2024-28053

Packages

EcosystemPackageAffectedFixed in
Go github.com/mattermost/mattermost/server/v8 < 0.0.0-20240209181221-674f549daf0e 0.0.0-20240209181221-674f549daf0e
Go github.com/mattermost/mattermost-server < 0.0.0-20240209181221-674f549daf0e 0.0.0-20240209181221-674f549daf0e
Go github.com/mattermost/mattermost-server/v5 < 0.0.0-20240209181221-674f549daf0e 0.0.0-20240209181221-674f549daf0e
Go github.com/mattermost/mattermost-server/v6 < 0.0.0-20240209181221-674f549daf0e 0.0.0-20240209181221-674f549daf0e

Details

As written in the advisory (Markdown source, shown as plain text).

Resource Exhaustion in Mattermost Server versions 8.1.x before 8.1.10 fails to limit the size of the payload that can be read and parsed allowing an attacker to send a very large email payload and crash the server.

References

External links from the advisory. They lead to third-party sites.