diff --git a/advisories/github-reviewed/2024/04/GHSA-p2wq-4ggp-45f3/GHSA-p2wq-4ggp-45f3.json b/advisories/github-reviewed/2024/04/GHSA-p2wq-4ggp-45f3/GHSA-p2wq-4ggp-45f3.json index 5ef221a3857..af963b66d1f 100644 --- a/advisories/github-reviewed/2024/04/GHSA-p2wq-4ggp-45f3/GHSA-p2wq-4ggp-45f3.json +++ b/advisories/github-reviewed/2024/04/GHSA-p2wq-4ggp-45f3/GHSA-p2wq-4ggp-45f3.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-p2wq-4ggp-45f3", - "modified": "2024-04-26T19:11:28Z", + "modified": "2025-05-12T21:50:10Z", "published": "2024-04-26T09:30:34Z", "aliases": [ "CVE-2024-22091" ], "summary": "Mattermost fails to limit the size of a request path", - "details": "Mattermost versions 8.1.x <= 8.1.10, 9.6.x <= 9.6.0, 9.5.x <= 9.5.2 and 8.1.x <= 8.1.11 fail to limit the size of a request path that includes user inputs which allows an attacker to cause excessive resource consumption, possibly leading to a DoS via sending large request paths\n\n", + "details": "Mattermost versions 8.1.x <= 8.1.10, 9.6.x <= 9.6.0, 9.5.x <= 9.5.2 and 8.1.x <= 8.1.11 fail to limit the size of a request path that includes user inputs which allows an attacker to cause excessive resource consumption, possibly leading to a DoS via sending large request paths", "severity": [ { "type": "CVSS_V3", @@ -114,7 +114,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-400" + "CWE-400", + "CWE-770" ], "severity": "LOW", "github_reviewed": true,