CVE-2023-5333
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
09/10/2023
Last modified:
12/10/2023
Description
Mattermost fails to deduplicate input IDs allowing a simple user to cause the application to consume excessive resources and possibly crash by sending a specially crafted request to /api/v4/users/ids with multiple identical IDs.
Impact
Base Score 3.x
6.50
Severity 3.x
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:* | 7.8.11 (excluding) | |
cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:* | 8.0.0 (including) | 8.0.3 (excluding) |
cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:* | 8.1.0 (including) | 8.1.2 (excluding) |
To consult the complete list of CPE names with products and versions, see this page