CVE-2023-5876 | THREATINT

Description

Mattermost fails to properly validate a RegExp built off the server URL path, allowing an attacker in control of an enrolled server to mount a Denial Of Service.

PUBLISHED Reserved 2023-10-31 | Published 2023-11-02 | Updated 2024-09-05 | Assigner Mattermost

LOW: 3.1CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

Problem types

CWE-400 Uncontrolled Resource Consumption

Product status

Default status

unaffected

Any version

affected

5.5.1

unaffected

Credits

DoyenSec finder

References

mattermost.com/security-updates

cve.org (CVE-2023-5876)

nvd.nist.gov (CVE-2023-5876)

Download JSON