CVE-2022-3147 — Server-side Denial of Service while processing a specifically crafted JPEG file

CVE-2022-3147

Server-side Denial of Service while processing a specifically crafted JPEG file PUBLISHED

Description (CNA)

Mattermost version 7.0.x and earlier fails to sufficiently limit the in-memory sizes of concurrently uploaded JPEG images, which allows authenticated users to cause resource exhaustion on specific system configurations, resulting in server-side Denial of Service.

Affected (CNA)

Vendor / product	Versions
Mattermost / Mattermost	affected unspecified through 7.0.x

CWE

CWE-400

References

https://mattermost.com/security-updates/
https://hackerone.com/reports/1549513

ADP enrichment

CVE

No English description supplied.

https://mattermost.com/security-updates/
https://hackerone.com/reports/1549513

CISA-ADP

No English description supplied.

No references supplied.