| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/mattermost/mattermost-server | all versions | |
| github.com/mattermost/mattermost-server/v5 | all versions | |
| github.com/mattermost/mattermost-server/v6 | < 6.4.2 | 6.4.2 |
| mattermost server | ≥ 5.37.0, < 5.37.9≥ 6.2.0, < 6.2.5≥ 6.3.0, < 6.3.5≥ 6.4.0, < 6.4.2 | 5.37.96.2.56.3.56.4.2 |
The image proxy component in Mattermost version 6.4.1 and earlier allocates memory for multiple copies of a proxied image, which allows an authenticated attacker to crash the server via links to very large image files.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free