A denial-of-service vulnerability in the Mattermost allows an authenticated user to crash the server via multiple requests to one of the API endpoints which could fetch a large amount of data.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| github.com/mattermost/mattermost-server(Go) | 0 | 7.1.4 | N/A |
| github.com/mattermost/mattermost-server(Go) | 7.2.0 | 7.2.1 | N/A |
| github.com/mattermost/mattermost-server(Go) | 7.3.0 | 7.3.1 | N/A |
CVSS Metrics