CVE-2023-5330 | THREATINT

Assigner	Mattermost
Reserved	2023-10-02
Published	2023-10-09
Updated	2024-09-05

Description

Mattermost fails to enforce a limit for the size of the cache entry for OpenGraph data allowing an attacker to send a specially crafted request to the /api/v4/opengraph filling the cache and turning the server unavailable.

MEDIUM: 4.3

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Problem types

CWE-400 Uncontrolled Resource Consumption

Product status

Default status

0x40057dba30

Any version

affected

Any version

affected

Any version

affected

7.8.11

unaffected

8.0.3

unaffected

8.1.2

unaffected

Credits

vultza (vultza) 0x40057dbac0

References

https://mattermost.com/security-updates

cve.org CVE-2023-5330

nvd.nist.gov CVE-2023-5330

Download JSON

https://cve.threatint.com/CVE/CVE-2023-5330

Subscribe to our newsletter to learn more about our work.