Beveiligingsadvies

CVE-2026-15814

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-14 10:39:45

Laatst bijgewerkt 2026-09-14 11:19:45

Toegewezen door Mattermost

CVSS-score 6.5

Status PUBLISHED

Beschrijving

Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 fail to limit the amount of memory allocated when decoding uploaded image files which allows an authenticated user to cause excessive server memory consumption and potential denial of service via uploading a specially crafted image as a profile picture, channel file attachment, team icon, or custom brand image. Mattermost Advisory ID: MMSA-2026-00719

← Alle CVE's bekijken Bekijk op cve.org ↗