CVE-2022-3147

published 2022-09-09

CVE-2022-3147: Mattermost version 7.0.x and earlier fails to sufficiently limit the in-memory sizes of concurrently uploaded JPEG images, which allows authenticated users to…

medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C N I N A H

Mattermost version 7.0.x and earlier fails to sufficiently limit the in-memory sizes of concurrently uploaded JPEG images, which allows authenticated users to cause resource exhaustion on specific system configurations, resulting in server-side Denial of Service.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
mattermost	mattermost	unspecified – 7.0.x	—
mattermost	mattermost_server	< 7.1.0	7.1.0

CWE-400 CWE-770