CVE-2022-1333 — A specifically drafted Playbook could trigger large amount of webhook requests leading to Denial of Service

CVE-2022-1333

A specifically drafted Playbook could trigger large amount of webhook requests leading to Denial of Service PUBLISHED

Description (CNA)

Mattermost Playbooks plugin v1.24.0 and earlier fails to properly check the limit on the number of webhooks, which allows authenticated and authorized users to create a specifically drafted Playbook which could trigger a large amount of webhook requests leading to Denial of Service.

Affected (CNA)

Vendor / product	Versions
Mattermost / Mattermost Playbooks	affected Playbooks through 1.24

CWE

CWE-770

References

https://mattermost.com/security-updates/

ADP enrichment

CVE

No English description supplied.

https://mattermost.com/security-updates/

CISA-ADP

No English description supplied.

No references supplied.