From e1d90354c7256dd19cc99c52ada0baf23ab4e61b Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Mon, 12 May 2025 21:51:53 +0000 Subject: [PATCH] Publish GHSA-p2wq-4ggp-45f3 --- .../2024/04/GHSA-p2wq-4ggp-45f3/GHSA-p2wq-4ggp-45f3.json | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/advisories/github-reviewed/2024/04/GHSA-p2wq-4ggp-45f3/GHSA-p2wq-4ggp-45f3.json b/advisories/github-reviewed/2024/04/GHSA-p2wq-4ggp-45f3/GHSA-p2wq-4ggp-45f3.json index 5ef221a3857..af963b66d1f 100644 --- a/advisories/github-reviewed/2024/04/GHSA-p2wq-4ggp-45f3/GHSA-p2wq-4ggp-45f3.json +++ b/advisories/github-reviewed/2024/04/GHSA-p2wq-4ggp-45f3/GHSA-p2wq-4ggp-45f3.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-p2wq-4ggp-45f3", - "modified": "2024-04-26T19:11:28Z", + "modified": "2025-05-12T21:50:10Z", "published": "2024-04-26T09:30:34Z", "aliases": [ "CVE-2024-22091" ], "summary": "Mattermost fails to limit the size of a request path", - "details": "Mattermost versions 8.1.x <= 8.1.10, 9.6.x <= 9.6.0, 9.5.x <= 9.5.2 and 8.1.x <= 8.1.11 fail to limit the size of a request path that includes user inputs which allows an attacker to cause excessive resource consumption, possibly leading to a DoS via sending large request paths\n\n", + "details": "Mattermost versions 8.1.x <= 8.1.10, 9.6.x <= 9.6.0, 9.5.x <= 9.5.2 and 8.1.x <= 8.1.11 fail to limit the size of a request path that includes user inputs which allows an attacker to cause excessive resource consumption, possibly leading to a DoS via sending large request paths", "severity": [ { "type": "CVSS_V3", @@ -114,7 +114,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-400" + "CWE-400", + "CWE-770" ], "severity": "LOW", "github_reviewed": true,