CVE-2023-5196
published 2023-09-29CVE-2023-5196: Mattermost fails to enforce character limits in all possible notification props allowing an attacker to send a really long value for a notification_prop…
PriorityP434medium6.5CVSS 3.1
AVNACLPRLUINSUCNINAH
EPSS
0.56%
42.5th percentile
Mattermost fails to enforce character limits in all possible notification props allowing an attacker to send a really long value for a notification_prop resulting in the server consuming an abnormal quantity of computing resources and possibly becoming temporarily unavailable for its users.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| github.com | mattermost_mattermost-server_v6 | >= 0 < 7.8.10 | 7.8.10 |
| github.com | mattermost_mattermost_server_v8 | >= 8.0.0 < 8.0.2 | 8.0.2 |
| github.com | mattermost_mattermost_server_v8 | >= 8.1.0 < 8.1.1 | 8.1.1 |
| mattermost | mattermost | <= 7.8.9 | — |
| mattermost | mattermost | — | — |
| mattermost | mattermost | >= 7.0.0 < 7.8.10 | 7.8.10 |
| mattermost | mattermost | >= 8.0.0 < 8.0.2 | 8.0.2 |
| mattermost | mattermost | >= 8.1.0 < 8.1.1 | 8.1.1 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Mattermost Uncontrolled Resource Consumption vulnerability
osv·2023-09-29
CVE-2023-5196 [MEDIUM] Mattermost Uncontrolled Resource Consumption vulnerability
Mattermost Uncontrolled Resource Consumption vulnerability
Mattermost fails to enforce character limits in all possible notification props allowing an attacker to send a really long value for a notification_prop resulting in the server consuming an abnormal quantity of computing resources and possibly becoming temporarily unavailable for its users.
GHSA
Mattermost Uncontrolled Resource Consumption vulnerability
ghsa·2023-09-29
CVE-2023-5196 [MEDIUM] CWE-400 Mattermost Uncontrolled Resource Consumption vulnerability
Mattermost Uncontrolled Resource Consumption vulnerability
Mattermost fails to enforce character limits in all possible notification props allowing an attacker to send a really long value for a notification_prop resulting in the server consuming an abnormal quantity of computing resources and possibly becoming temporarily unavailable for its users.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-09-29
Published