CVE-2023-5330 — Denial of Service via Opengraph Data Cache

CVE-2023-5330

Denial of Service via Opengraph Data Cache PUBLISHED

Description (CNA)

Mattermost fails to enforce a limit for the size of the cache entry for OpenGraph data allowing an attacker to send a specially crafted request to the /api/v4/opengraph filling the cache and turning the server unavailable.

Affected (CNA)

Vendor / product	Versions
Mattermost / Mattermost	affected 0 through 7.8.10; affected 0 through 8.0.2; affected 0 through 8.1.1; unaffected 7.8.11; unaffected 8.0.3; unaffected 8.1.2

CWE

CWE-400

References

https://mattermost.com/security-updates

ADP enrichment

CVE

No English description supplied.

https://mattermost.com/security-updates

CISA-ADP

No English description supplied.

No references supplied.