Description
Mattermost fails to enforce character limits in all possible notification props allowing an attacker to send a really long value for a notification_prop resulting in the server consuming an abnormal quantity of computing resources and possibly becoming temporarily unavailable for its users.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Mattermost Mattermost
Default version status: unaffected
0 to ≤ 7.8.9affected8.1.0affected0 to ≤ 8.0.1affected7.8.10unaffected8.1.1unaffected8.0.2unaffected