CVE-2019-20858

published 2020-06-19

CVE-2019-20858: An issue was discovered in Mattermost Server before 5.15.0. It allows attackers to cause a denial of service (CPU consumption) via crafted characters in a SQL…

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

An issue was discovered in Mattermost Server before 5.15.0. It allows attackers to cause a denial of service (CPU consumption) via crafted characters in a SQL LIKE clause to an APIv4 endpoint.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
mattermost	mattermost_server	< 5.15.0	5.15.0

CWE-400