CVE-2023-5330
Denial of Service via Opengraph Data Cache
Résumé
Denial of Service via Opengraph Data Cache
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Mattermost fails to enforce a limit for the size of the cache entry for OpenGraph data allowing an attacker to send a specially crafted request to the /api/v4/opengraph filling the cache and turning the server unavailable.
Références
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com