netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish GHSA-wj37-mpq9-xrcm

Browse Source
This commit is contained in:
advisory-database[bot]
2025-05-12 21:50:06 +00:00
parent baa778c90a
commit 802752a1d1
1 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2024/04/GHSA-wj37-mpq9-xrcm/GHSA-wj37-mpq9-xrcm.json
+4 -3
View File
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-wj37-mpq9-xrcm",
"modified": "2024-04-26T19:10:41Z",
"modified": "2025-05-12T21:48:38Z",
"published": "2024-04-26T09:30:34Z",
"aliases": [
"CVE-2024-4183"
],
"summary": "Mattermost fails to limit the number of active sessions",
"details": "Mattermost versions 8.1.x before 8.1.12, 9.6.x before 9.6.1, 9.5.x before 9.5.3, 9.4.x before 9.4.5 fail to limit the number of active sessions, which allows an authenticated attacker to crash the server via repeated requests to the getSessions API after flooding the sessions table.\n\n",
"details": "Mattermost versions 8.1.x before 8.1.12, 9.6.x before 9.6.1, 9.5.x before 9.5.3, 9.4.x before 9.4.5 fail to limit the number of active sessions, which allows an authenticated attacker to crash the server via repeated requests to the getSessions API after flooding the sessions table.",
"severity": [
{
"type": "CVSS_V3",
@@ -136,7 +136,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-400"
"CWE-400",
"CWE-770"
],
"severity": "MODERATE",
"github_reviewed": true,