Beveiligingsadvies

CVE-2026-14298

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-13 08:03:00

Laatst bijgewerkt 2026-09-14 10:35:32

Toegewezen door Mattermost

CVSS-score 6.5

Status PUBLISHED

Beschrijving

Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 fail to limit decompressed content size and enforce the configured maximum file size in the Boards archive import handler, which allows an authenticated user to cause memory exhaustion or unbounded disk consumption via a crafted .boardarchive file uploaded to the import endpoint.. Mattermost Advisory ID: MMSA-2026-00713

← Alle CVE's bekijken Bekijk op cve.org ↗