← CVE Intelligence

CVE-2024-24988

Excessive resource consumption when sending long emoji names in user custom status PUBLISHED

Description (CNA)

Mattermost fails to properly validate the length of the emoji value in the custom user status, allowing an attacker to send multiple times a very long string as an emoji value causing high resource consumption and possibly crashing the server.

Affected (CNA)

Vendor / productVersions
Mattermost / Mattermostaffected 0 through 9.2.4; affected 0 through 8.1.8; affected 0 through 9.3.0; unaffected 9.4.0; unaffected 9.3.1; unaffected 9.2.5; unaffected 8.1.9

CWE

CWE-400

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.