Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2023-48369

Mattermost fails to limit the log size of server logs allowing an attacker sending specially crafted requests to different endpoints to potentially overflow the log.

VectorNETWORK

PublishedNov 27, 2023, 10:15

Published Byresponsibledisclosure@mattermost.com

Base Score

Score5.3

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

github.com/mattermost/mattermost/server/v8(Go)9.1.09.1.1N/A

github.com/mattermost/mattermost/server/v8(Go)9.0.09.0.2N/A

github.com/mattermost/mattermost/server/v8(Go)08.1.4N/A

github.com/mattermost/mattermost-server/v6(Go)07.8.13N/A

References

https://mattermost.com/security-updates

Weakness Type

CWE-400

CVSS Metrics

Base Score

5.3

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK