NA

CVE-2023-49809

Published: 12/12/2023 Updated: 14/12/2023
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

Mattermost fails to handle a null request body in the /add endpoint, allowing a simple member to send a request with null request body to that endpoint and make it crash. After a few repetitions, the plugin is disabled. 

Vulnerable Product Search on Vulmon Subscribe to Product

mattermost mattermost server