Unrated

Malicious imports can lead to Denial of Service

CVE-2022-2406 First seen on SecPulse Jul 15, 2022

Original description The description as published by the source.

The legacy Slack import feature in Mattermost version 6.7.0 and earlier fails to properly limit the sizes of imported files, which allows an authenticated attacker to crash the server by importing large files via the Slack import REST API.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
web mattermost.com

Key facts

Severity: Unrated
Published: Jul 15, 2022
First seen on SecPulse: Jul 15, 2022
CWE: CWE-400

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:00