Unrated
A crafted SVG attachment can crash a Mattermost server
CVE-2022-1982
First seen on SecPulse
Original description The description as published by the source.
Uncontrolled resource consumption in Mattermost version 6.6.0 and earlier allows an authenticated attacker to crash the server via a crafted SVG attachment on a post.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com