← CVE Intelligence

CVE-2024-4183

Mattermost / Mattermost PUBLISHED

Description (CNA)

Mattermost versions 8.1.x before 8.1.12, 9.6.x before 9.6.1, 9.5.x before 9.5.3, 9.4.x before 9.4.5 fail to limit the number of active sessions, which allows an authenticated attacker to crash the server via repeated requests to the getSessions API after flooding the sessions table.

Affected (CNA)

Vendor / productVersions
Mattermost / Mattermostaffected 9.6.0 through 8.1.10; affected 9.5.0 through 9.5.2; affected 9.4.0 through 9.4.4; affected 8.1.0 through 8.1.11; unaffected 9.7.0 through 8.1.11; unaffected 9.6.1; unaffected 9.5.3; unaffected 9.4.5; unaffected 8.1.12

CWE

CWE-400

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.