Description (CNA)
Mattermost fails to enforce character limits in all possible notification props allowing an attacker to send a really long value for a notification_prop resulting in the server consuming an abnormal quantity of computing resources and possibly becoming temporarily unavailable for its users.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Mattermost / Mattermost | affected 0 through 7.8.9; affected 8.1.0; affected 0 through 8.0.1; unaffected 7.8.10; unaffected 8.1.1; unaffected 8.0.2 |
CWE
CWE-400
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.