Skip to content
CVE PROGRAM SOURCE RECORD3.1 Low

CVE-2022-4045

Authenticated user could send multiple requests containing a parameter which could fetch a large amount of data and can crash a Mattermost server

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Mattermost

Description

A denial-of-service vulnerability in the Mattermost allows an authenticated user to crash the server via multiple requests to one of the API endpoints which could fetch a large amount of data. 

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mattermost Mattermost

Default version status: unaffected

  • 0 to < 7.3.*affected
  • 7.4.0unaffected

References