En bref
- CVE-2025-14822 est une vulnérabilité MOYENNE (CVSS 6.5) touchant github.com/mattermost/mattermost-server, mattermost server (mattermost).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.35%, plus élevée que 28.5% des vulnérabilités.
- Correctif : mettre à jour vers 10.11.9, 10.11.9+incompatible, 11.2.0, 11.2.0+incompatible ou plus récent.
| Package | Affected versions | Patched versions |
|---|
| github.com/mattermost/mattermost-server Go | ≥ 10.11.0, < 10.11.9≥ 10.11.0+incompatible, < 10.11.9+incompatible≥ 11.0.0, < 11.2.0≥ 11.0.1+incompatible, < 11.2.0+incompatible
| 10.11.910.11.9+incompatible11.2.011.2.0+incompatible
|
| mattermost server | ≥ 10.11.0, < 10.11.9
| 10.11.9
|
Description
Mattermost versions 10.11.x <= 10.11.8 fail to validate input size before processing hashtags which allows an authenticated attacker to exhaust CPU resources via a single HTTP request containing a post with thousands space-separated tokens.
NVD description
Mattermost versions 10.11.x <= 10.11.8 fail to validate input size before processing hashtags which allows an authenticated attacker to exhaust CPU resources via a single HTTP request containing a post with thousands space-separated tokens
Autres vulnérabilités de github.com/mattermost/mattermost-server
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free