CVE-2023-49809
Todo plugin gets crashed and disabled by member
Résumé
Todo plugin gets crashed and disabled by member
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Mattermost fails to handle a null request body in the /add endpoint, allowing a simple member to send a request with null request body to that endpoint and make it crash. After a few repetitions, the plugin is disabled.
Références
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com