CVE-2023-5330

Description

Mattermost fails to enforce a limit for the size of the cache entry for OpenGraph data allowing an attacker to send a specially crafted request to the /api/v4/opengraph filling the cache and turning the server unavailable.

Reserved 2023-10-02 | Published 2023-10-09 | Updated 2024-09-05 | Assigner Mattermost

Problem types

CWE-400 Uncontrolled Resource Consumption

Product status

Default status
unaffected

Any version
affected

Any version
affected

Any version
affected

7.8.11
unaffected

8.0.3
unaffected

8.1.2
unaffected

Credits

vultza (vultza) finder

References

mattermost.com/security-updates

cve.org (CVE-2023-5330)

nvd.nist.gov (CVE-2023-5330)

Download JSON