CVE-2022-3147
Server-side Denial of Service while processing a specifically crafted JPEG file
Résumé
Server-side Denial of Service while processing a specifically crafted JPEG file
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Mattermost version 7.0.x and earlier fails to sufficiently limit the in-memory sizes of concurrently uploaded JPEG images, which allows authenticated users to cause resource exhaustion on specific system configurations, resulting in server-side Denial of Service.
Références
- advisory github.com
- advisory nvd.nist.gov
- web hackerone.com
- web mattermost.com