← CVE Intelligence

CVE-2022-4019

Authenticated user could send multiple requests containing a large payload to a Playbooks API and can crash a Mattermost server PUBLISHED

Description (CNA)

A denial-of-service vulnerability in the Mattermost Playbooks plugin allows an authenticated user to crash the server via multiple large requests to one of the Playbooks API endpoints.

Affected (CNA)

Vendor / productVersions
Mattermost / Playbooks Pluginaffected 1.0.0 through 7.1.3; unaffected 7.1.4 through 7.1.*; affected 7.2.0 before 7.2.1; affected 7.3.0 before 7.3.1; unaffected 7.4.0

CWE

CWE-770

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.