← CVE Intelligence

CVE-2022-1982

A crafted SVG attachment can crash a Mattermost server PUBLISHED

Description (CNA)

Uncontrolled resource consumption in Mattermost version 6.6.0 and earlier allows an authenticated attacker to crash the server via a crafted SVG attachment on a post.

Affected (CNA)

Vendor / productVersions
Mattermost / Mattermostaffected 6.5.x 6.5.0; affected 6.6.x 6.6.0; affected 5.x through 5.39; affected 6.x through 6.3.7; affected 6.4.x through 6.4.2

CWE

CWE-400

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.