Non évaluée
Mattermost versions 8.1.x before 8.1.10, 9.2.x before 9.2.6, 9.3.x before 9.3.2, and 9.4.x before 9.4.3 fail to limit the number of @-mentions process...
CVE-2024-2446
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
Mattermost versions 8.1.x before 8.1.10, 9.2.x before 9.2.6, 9.3.x before 9.3.2, and 9.4.x before 9.4.3 fail to limit the number of @-mentions processed per message, allowing an authenticated attacker to crash the client applications of other users via large, crafted messages.
Références
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com