CVE-2024-28053 — Resource Exhaustion via the Invitation Feature

CVE-2024-28053

Resource Exhaustion via the Invitation Feature PUBLISHED

Description (CNA)

Resource Exhaustion in Mattermost Server versions 8.1.x before 8.1.10 fails to limit the size of the payload that can be read and parsed allowing an attacker to send a very large email payload and crash the server.

Affected (CNA)

Vendor / product	Versions
Mattermost / Mattermost	affected 8.1.0 through 8.1.9; unaffected 9.5.0; unaffected 8.1.10

CWE

CWE-400

References

https://mattermost.com/security-updates

ADP enrichment

CVE

No English description supplied.

https://mattermost.com/security-updates

CISA-ADP

No English description supplied.

No references supplied.