GHSA-w496-f5qq-m58jMediumCVSS 5.3

Mattermost vulnerable to excessive memory consumption

Published
November 6, 2023
Last Modified
November 23, 2023

🔗 CVE IDs covered (1)

CVE-2023-5969 →

📋 Description

Mattermost fails to properly sanitize the request to /api/v4/redirect_location allowing an attacker, sending a specially crafted request to /api/v4/redirect_location, to fill up the memory due to caching large items.

🎯 Affected products4

  • go/github.com/mattermost/mattermost-server/v6:< 7.8.12
  • go/github.com/mattermost/mattermost/server/v8:>= 8.0.0, < 8.0.4
  • go/github.com/mattermost/mattermost/server/v8:>= 8.1.0, < 8.1.3
  • go/github.com/mattermost/mattermost/server/v8:= 9.0.0

🔗 References (5)