← CVE Intelligence

CVE-2023-5969

Denial of Service via Link Preview in /api/v4/redirect_location PUBLISHED

Description (CNA)

Mattermost fails to properly sanitize the request to /api/v4/redirect_location allowing an attacker, sending a specially crafted request to /api/v4/redirect_location, to fill up the memory due to caching large items.

Affected (CNA)

Vendor / productVersions
Mattermost / Mattermostaffected 0 through 7.8.11; affected 0 through 8.0.3; affected 0 through 8.1.2; affected 0 through 9.0.0; unaffected 7.8.12; unaffected 8.0.4; unaffected 8.1.3; unaffected 9.0.1

CWE

CWE-400

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.