CVE-2023-49809
Todo plugin gets crashed and disabled by member
Summary
Todo plugin gets crashed and disabled by member
Original description
The description as published by the source.
Mattermost fails to handle a null request body in the /add endpoint, allowing a simple member to send a request with null request body to that endpoint and make it crash. After a few repetitions, the plugin is disabled.
References
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com