CVE-2024-54083

Description

Mattermost versions 10.1.x <= 10.1.2, 10.0.x <= 10.0.2, 9.11.x <= 9.11.4, 9.5.x <= 9.5.12 fail to properly validate the type of callProps which allows a user to cause a client side (webapp and mobile) DoS to users of particular channels, by sending a specially crafted post.

Reserved 2024-12-11 | Published 2024-12-16 | Updated 2024-12-16 | Assigner Mattermost

Problem types

CWE-1287: Improper Validation of Specified Type of Input

Product status

Default status
unaffected

10.1.0
affected

10.0.0
affected

9.11.0
affected

9.5.0
affected

10.2.0
unaffected

2.22.0
unaffected

10.1.3
unaffected

10.0.3
unaffected

9.11.5
unaffected

9.5.13
unaffected

Credits

c0rydoras (c0rydoras) finder

References

mattermost.com/security-updates

cve.org (CVE-2024-54083)

nvd.nist.gov (CVE-2024-54083)

Download JSON