cbcvebase.
CVE-2023-3614
published 2023-07-17

CVE-2023-3614: Mattermost fails to properly validate a gif image file, allowing an attacker to consume a significant amount of server resources, making the server…

low3.3CVSS 3.1
AVLACLPRNUIRSUCNINAL
Mattermost fails to properly validate a gif image file, allowing an attacker to consume a significant amount of server resources, making the server unresponsive for an extended period of time by linking to specially crafted image file.

Affected

4 ranges
VendorProductVersion rangeFixed in
mattermostmattermost<= 7.8.6
mattermostmattermost_server< 7.8.77.8.7
mattermostmattermost_server>= 7.10.0 < 7.10.37.10.3
mattermostmattermost_server>= 7.9.0 < 7.9.57.9.5