mirror of
https://github.com/netbirdio/advisory-database.git
synced 2026-05-22 18:04:22 -07:00
Publish GHSA-p2wq-4ggp-45f3
This commit is contained in:
@@ -1,13 +1,13 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-p2wq-4ggp-45f3",
|
||||
"modified": "2024-04-26T19:11:28Z",
|
||||
"modified": "2025-05-12T21:50:10Z",
|
||||
"published": "2024-04-26T09:30:34Z",
|
||||
"aliases": [
|
||||
"CVE-2024-22091"
|
||||
],
|
||||
"summary": "Mattermost fails to limit the size of a request path",
|
||||
"details": "Mattermost versions 8.1.x <= 8.1.10, 9.6.x <= 9.6.0, 9.5.x <= 9.5.2 and 8.1.x <= 8.1.11 fail to limit the size of a request path that includes user inputs which allows an attacker to cause excessive resource consumption, possibly leading to a DoS via sending large request paths\n\n",
|
||||
"details": "Mattermost versions 8.1.x <= 8.1.10, 9.6.x <= 9.6.0, 9.5.x <= 9.5.2 and 8.1.x <= 8.1.11 fail to limit the size of a request path that includes user inputs which allows an attacker to cause excessive resource consumption, possibly leading to a DoS via sending large request paths",
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
@@ -114,7 +114,8 @@
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
"CWE-400"
|
||||
"CWE-400",
|
||||
"CWE-770"
|
||||
],
|
||||
"severity": "LOW",
|
||||
"github_reviewed": true,
|
||||
|
||||
Reference in New Issue
Block a user