← CVE Intelligence

CVE-2022-1337

OOM DoS in Mattermost image proxy PUBLISHED

Description (CNA)

The image proxy component in Mattermost version 6.4.1 and earlier allocates memory for multiple copies of a proxied image, which allows an authenticated attacker to crash the server via links to very large image files.

Affected (CNA)

Vendor / productVersions
Mattermost / Mattermostaffected 6.4 before 6.4.2; affected 6.3 before 6.3.5; affected 6.2 before 6.2.5; affected 5.37 before 5.37.9

CWE

CWE-400

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.