CVE-2025-14435 — Application-Level DoS via infinite re-render loop in user profile handling

CVE-2025-14435

Application-Level DoS via infinite re-render loop in user profile handling PUBLISHED

Description (CNA)

Mattermost versions 10.11.x <= 10.11.8, 11.1.x <= 11.1.1, 11.0.x <= 11.0.6 fail to prevent infinite re-renders on API errors which allows authenticated users to cause application-level DoS via triggering unbounded component re-render loops.

Affected (CNA)

Vendor / product	Versions
Mattermost / Mattermost	affected 10.11.0 through 10.11.8; affected 11.1.0 through 11.1.1; affected 11.0.0 through 11.0.6; unaffected 11.2.0; unaffected 10.11.9; unaffected 11.1.2; unaffected 11.0.7

CWE

CWE-770

References

https://mattermost.com/security-updates

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.