Skip to content
CVE PROGRAM SOURCE RECORD3.5 Low

CVE-2022-1333

A specifically drafted Playbook could trigger large amount of webhook requests leading to Denial of Service

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Mattermost

Description

Mattermost Playbooks plugin v1.24.0 and earlier fails to properly check the limit on the number of webhooks, which allows authenticated and authorized users to create a specifically drafted Playbook which could trigger a large amount of webhook requests leading to Denial of Service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mattermost Mattermost Playbooks

  • Playbooks to ≤ 1.24affected

References