GitStock

mattermost/mattermost · Security

Mattermost Improper Validation of Specified Type of Input vulnerability

Open GitHub
GHSA ID
GHSA-69pr-78gv-7c6h
CVE ID
CVE-2024-54083
Severity
medium
Published
Updated
CVSS
6.5 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v3
6.5 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Description

Mattermost versions 10.1.x <= 10.1.2, 10.0.x <= 10.0.2, 9.11.x <= 9.11.4, 9.5.x <= 9.5.12 fail to properly validate the type of callProps which allows a user to cause a client side (webapp and mobile) DoS to users of particular channels, by sending a specially crafted post.

CWEs

  • CWE-1287 · Improper Validation of Specified Type of Input

References