← CVE Intelligence

CVE-2023-40703

Denial of Service via specially crafted block fields in Mattermost Boards PUBLISHED

Description (CNA)

Mattermost fails to properly limit the characters allowed in different fields of a block in Mattermost Boards allowing a attacker to consume excessive resources, possibly leading to Denial of Service, by patching the field of a block using a specially crafted string. 

Affected (CNA)

Vendor / productVersions
Mattermost / Mattermostaffected 0 through 7.8.12; affected 0 through 8.1.3; affected 0 through 9.0.1; affected 0 through 9.1.0; unaffected 9.1.1; unaffected 9.0.2; unaffected 7.8.13; unaffected 8.1.4

CWE

CWE-400

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.