Beveiligingsadvies

CVE-2023-49809

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-12-12 08:20:08
Laatst bijgewerkt 2024-08-02 22:01:26
Toegewezen door Mattermost
CVSS-score 4.3
Status PUBLISHED

Beschrijving

Mattermost fails to handle a null request body in the /add endpoint, allowing a simple member to send a request with null request body to that endpoint and make it crash. After a few repetitions, the plugin is disabled.