← CVE Intelligence

CVE-2023-5967

Denial of Service via crashing the Calls Plugin PUBLISHED

Description (CNA)

Mattermost fails to properly validate requests to the Calls plugin, allowing an attacker sending a request without a User Agent header to cause a panic and crash the Calls plugin

Affected (CNA)

Vendor / productVersions
Mattermost / Mattermostaffected 0 through 8.1.2; affected 0 through 8.0.3; affected 0 through 7.8.11; unaffected 8.1.3; unaffected 8.0.4; unaffected 7.8.12

CWE

CWE-754

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.