CVE-2022-3147
Server-side Denial of Service while processing a specifically crafted JPEG file
Summary
Server-side Denial of Service while processing a specifically crafted JPEG file
Original description
The description as published by the source.
Mattermost version 7.0.x and earlier fails to sufficiently limit the in-memory sizes of concurrently uploaded JPEG images, which allows authenticated users to cause resource exhaustion on specific system configurations, resulting in server-side Denial of Service.
References
- advisory github.com
- advisory nvd.nist.gov
- web hackerone.com
- web mattermost.com