CVE-2023-5969

Summary

Mattermost fails to properly sanitize the request to /api/v4/redirect_location allowing an attacker, sending a specially crafted request to /api/v4/redirect_location, to fill up the memory due to caching large items.

Affected Software

VendorProductVersion RangeStatus
MattermostMattermost0 <= 7.8.11affected
MattermostMattermost0 <= 8.0.3affected
MattermostMattermost0 <= 8.1.2affected
MattermostMattermost0 <= 9.0.0affected
MattermostMattermost7.8.12unaffected
MattermostMattermost8.0.4unaffected
MattermostMattermost8.1.3unaffected
MattermostMattermost9.0.1unaffected

Weaknesses

  • CWE-400: CWE-400 Uncontrolled Resource Consumption

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References