En resumen
- CVE-2025-14822 es una vulnerabilidad MEDIO (CVSS 6.5) que afecta a github.com/mattermost/mattermost-server, mattermost server (mattermost).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.35%, mayor que el 28.5% de las vulnerabilidades.
- Solución: actualizar a 10.11.9, 10.11.9+incompatible, 11.2.0, 11.2.0+incompatible o posterior.
| Package | Affected versions | Patched versions |
|---|
| github.com/mattermost/mattermost-server Go | ≥ 10.11.0, < 10.11.9≥ 10.11.0+incompatible, < 10.11.9+incompatible≥ 11.0.0, < 11.2.0≥ 11.0.1+incompatible, < 11.2.0+incompatible
| 10.11.910.11.9+incompatible11.2.011.2.0+incompatible
|
| mattermost server | ≥ 10.11.0, < 10.11.9
| 10.11.9
|
Description
Mattermost versions 10.11.x <= 10.11.8 fail to validate input size before processing hashtags which allows an authenticated attacker to exhaust CPU resources via a single HTTP request containing a post with thousands space-separated tokens.
NVD description
Mattermost versions 10.11.x <= 10.11.8 fail to validate input size before processing hashtags which allows an authenticated attacker to exhaust CPU resources via a single HTTP request containing a post with thousands space-separated tokens
Más vulnerabilidades de github.com/mattermost/mattermost-server
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free