CVE-2026-2325P3MEDIUM≥ 0, < 1.1.1-0.20260213105619-c5892dd169de2026-05-18
CVE-2026-2325 [MEDIUM] CWE-770 Mattermost doesn't limit the size of the request body on the start meeting API endpoint
Mattermost doesn't limit the size of the request body on the start meeting API endpoint
Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail to limit the size of the request body on the start meeting API endpoint, which allows an authenticated attacker to cause resource exhaustion or denial of service via a crafted oversized HTTP POST request to {{/a
ghsa