CVE-2023-5333 — Denial of Service via multiple identical User IDs in /api/v4/users/ids

CVE-2023-5333

Denial of Service via multiple identical User IDs in /api/v4/users/ids PUBLISHED

Description (CNA)

Mattermost fails to deduplicate input IDs allowing a simple user to cause the application to consume excessive resources and possibly crash by sending a specially crafted request to /api/v4/users/ids with multiple identical IDs.

Affected (CNA)

Vendor / product	Versions
Mattermost / Mattermost	affected 0 through 7.8.10; affected 0 through 8.0.2; affected 0 through 8.1.1; unaffected 7.8.11; unaffected 8.0.3; unaffected 8.1.2

CWE

CWE-400

References

https://mattermost.com/security-updates

ADP enrichment

CVE

No English description supplied.

https://mattermost.com/security-updates

CISA-ADP

No English description supplied.

No references supplied.