CVE-2022-4044

Denial of service in Mattermost in go/github.com/mattermost/mattermost-server

Identifiers

GHSA-5jph-wrq7-v9hf, CVE-2022-4044

Package Slug

go/github.com/mattermost/mattermost-server

Vulnerability

Denial of service in Mattermost

Description

A denial-of-service vulnerability in Mattermost allows an authenticated user to crash the server via multiple large autoresponder messages.

Affected Versions

All versions before 7.1.4, all versions starting from 7.2.0 before 7.2.1, all versions starting from 7.3.0 before 7.3.1

Solution

Upgrade to versions 7.1.4, 7.2.1, 7.3.1 or above.

Last Modified

2022-11-24

source