CVE-2022-3147
Server-side Denial of Service while processing a specifically crafted JPEG file
概要
Server-side Denial of Service while processing a specifically crafted JPEG file
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Mattermost version 7.0.x and earlier fails to sufficiently limit the in-memory sizes of concurrently uploaded JPEG images, which allows authenticated users to cause resource exhaustion on specific system configurations, resulting in server-side Denial of Service.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web hackerone.com
- web mattermost.com