CVE-2023-48268 — Denial of Service via Board Import Zip Bomb

CVE-2023-48268

Denial of Service via Board Import Zip Bomb PUBLISHED

Description (CNA)

Mattermost fails to limit the amount of data extracted from compressed archives during board import in Mattermost Boards allowing an attacker to consume excessive resources, possibly leading to Denial of Service, by importing a board using a specially crafted zip (zip bomb).

Affected (CNA)

Vendor / product	Versions
Mattermost / Mattermost	affected 0 through 7.8.12; affected 0 through 8.1.3; affected 0 through 9.0.1; affected 0 through 9.1.0; unaffected 9.1.1; unaffected 9.0.2; unaffected 7.8.13; unaffected 8.1.4

CWE

CWE-400

References

https://mattermost.com/security-updates

ADP enrichment

CVE

No English description supplied.

https://mattermost.com/security-updates

CISA-ADP

No English description supplied.

No references supplied.