CVE-2023-49809

published 2023-12-12

CVE-2023-49809: Mattermost fails to handle a null request body in the /add endpoint, allowing a simple member to send a request with null request body to that endpoint and…

Priority P4 32 medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C N I N A H

Mattermost fails to handle a null request body in the /add endpoint, allowing a simple member to send a request with null request body to that endpoint and make it crash. After a few repetitions, the plugin is disabled.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
mattermost	mattermost	<= 8.1.5	—
mattermost	mattermost_server	<= 8.1.5	—
mattermost	mattermost_server	9.0.0 – 9.1.0	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-400