CVE-2023-5876 — Regex DoS from a malicious server enrolled in Desktop

CVE-2023-5876

Regex DoS from a malicious server enrolled in Desktop PUBLISHED

Description (CNA)

Mattermost fails to properly validate a RegExp built off the server URL path, allowing an attacker in control of an enrolled server to mount a Denial Of Service.

Affected (CNA)

Vendor / product	Versions
Mattermost / Mattermost Desktop	affected 0 through 5.5.0; unaffected 5.5.1

CWE

CWE-400

References

https://mattermost.com/security-updates

ADP enrichment

CVE

No English description supplied.

https://mattermost.com/security-updates

CISA-ADP

No English description supplied.

No references supplied.