Skip to content
CVE PROGRAM SOURCE RECORD3.1 Low

CVE-2024-28053

Resource Exhaustion via the Invitation Feature

Description

Resource Exhaustion in Mattermost Server versions 8.1.x before 8.1.10 fails to limit the size of the payload that can be read and parsed allowing an attacker to send a very large email payload and crash the server.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mattermost Mattermost

Default version status: unaffected

  • 8.1.0 to ≤ 8.1.9affected
  • 9.5.0unaffected
  • 8.1.10unaffected

References