CVE-2023-2831

Summary

Mattermost fails to unescape Markdown strings in a memory-efficient way, allowing an attacker to cause a Denial of Service by sending a message containing a large number of escaped characters.

Affected Software

VendorProductVersion RangeStatus
MattermostMattermost0 <= 7.1.9affected
MattermostMattermost0 <= 7.8.4affected
MattermostMattermost0 <= 7.9.3affected
MattermostMattermost7.10.0affected
MattermostMattermost7.1.10unaffected
MattermostMattermost7.8.5unaffected
MattermostMattermost7.9.4unaffected
MattermostMattermost7.10.1unaffected

Weaknesses

  • CWE-400: CWE-400 Uncontrolled Resource Consumption

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References