未評価
Resource Exhaustion via the Invitation Feature
CVE-2024-28053
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
Resource Exhaustion in Mattermost Server versions 8.1.x before 8.1.10 fails to limit the size of the payload that can be read and parsed allowing an attacker to send a very large email payload and crash the server.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com