Publish GHSA-p2wq-4ggp-45f3

This commit is contained in:
advisory-database[bot]
2025-05-12 21:51:53 +00:00
parent 802752a1d1
commit e1d90354c7
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-p2wq-4ggp-45f3",
"modified": "2024-04-26T19:11:28Z",
"modified": "2025-05-12T21:50:10Z",
"published": "2024-04-26T09:30:34Z",
"aliases": [
"CVE-2024-22091"
],
"summary": "Mattermost fails to limit the size of a request path",
"details": "Mattermost versions 8.1.x <= 8.1.10, 9.6.x <= 9.6.0, 9.5.x <= 9.5.2 and 8.1.x <= 8.1.11 fail to limit the size of a request path that includes user inputs which allows an attacker to cause excessive resource consumption, possibly leading to a DoS via sending large request paths\n\n",
"details": "Mattermost versions 8.1.x <= 8.1.10, 9.6.x <= 9.6.0, 9.5.x <= 9.5.2 and 8.1.x <= 8.1.11 fail to limit the size of a request path that includes user inputs which allows an attacker to cause excessive resource consumption, possibly leading to a DoS via sending large request paths",
"severity": [
{
"type": "CVSS_V3",
@@ -114,7 +114,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-400"
"CWE-400",
"CWE-770"
],
"severity": "LOW",
"github_reviewed": true,