← CVE Intelligence

CVE-2024-28949

DoS via a large number of User Preferences PUBLISHED

Description (CNA)

Mattermost Server versions 9.5.x before 9.5.2, 9.4.x before 9.4.4, 9.3.x before 9.3.3, 8.1.x before 8.1.11 don't limit the number of user preferences which allows an attacker to send a large number of user preferences potentially causing denial of service.

Affected (CNA)

Vendor / productVersions
Mattermost / Mattermostaffected 9.5.0 through 9.5.1; affected 9.4.0 through 9.4.3; affected 9.3.0 through 9.3.2; affected 8.1.0 through 8.1.10; unaffected 9.6.0; unaffected 9.5.2; unaffected 9.4.4; unaffected 9.3.3; unaffected 8.1.11

CWE

CWE-400

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.