Uncontrolled Resource Consumption Affecting github.com/mattermost/mattermost-server/server/v8/channels/api4 package, versions >=8.0.0 <8.0.3 >=8.1.0 <8.1.2
Threat Intelligence
EPSS
0.07% (32nd
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-GOLANG-GITHUBCOMMATTERMOSTMATTERMOSTSERVERSERVERV8CHANNELSAPI4-6050235
- published 13 Nov 2023
- disclosed 6 Nov 2023
- credit vultza
Introduced: 6 Nov 2023
CVE-2023-5969 Open this link in a new tabHow to fix?
Upgrade github.com/mattermost/mattermost-server/server/v8/channels/api4 to version 8.0.3, 8.1.2 or higher.
Overview
Affected versions of this package are vulnerable to Uncontrolled Resource Consumption via /api/v4/redirect_location. An attacker could fill up the memory due to caching large items by sending a specially crafted request
References
CVSS Scores
version 3.1