CVE-2022-4045 — Authenticated user could send multiple requests containing a parameter which could fetch a large amount of data and ca…

CVE-2022-4045

Authenticated user could send multiple requests containing a parameter which could fetch a large amount of data and can crash a Mattermost server PUBLISHED

Description (CNA)

A denial-of-service vulnerability in the Mattermost allows an authenticated user to crash the server via multiple requests to one of the API endpoints which could fetch a large amount of data.

Affected (CNA)

Vendor / product	Versions
Mattermost / Mattermost	affected 0 before 7.3.*; unaffected 7.4.0

CWE

CWE-770

References

https://mattermost.com/security-updates/

ADP enrichment

CVE

No English description supplied.

https://mattermost.com/security-updates/

CISA-ADP

No English description supplied.

No references supplied.