Beveiligingsadvies

CVE-2026-6850

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-13 08:13:02

Laatst bijgewerkt 2026-07-13 13:56:16

Toegewezen door Mattermost

CVSS-score 6.5

Status PUBLISHED

Beschrijving

Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10.11.19 fail to validate the length and content of message attachment field values, which allows an authenticated attacker to cause a denial of service for all users in a channel via a post containing a specially crafted payload that triggers catastrophic backtracking in the client-side markdown parser.. Mattermost Advisory ID: MMSA-2026-00658

← Alle CVE's bekijken Bekijk op cve.org ↗