In breve
- CVE-2025-14822 è una vulnerabilità MEDIO (CVSS 6.5) che riguarda github.com/mattermost/mattermost-server, mattermost server (mattermost).
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.35%, superiore al 28.5% delle vulnerabilità.
- Correzione: aggiornare a 10.11.9, 10.11.9+incompatible, 11.2.0, 11.2.0+incompatible o successiva.
| Package | Affected versions | Patched versions |
|---|
| github.com/mattermost/mattermost-server Go | ≥ 10.11.0, < 10.11.9≥ 10.11.0+incompatible, < 10.11.9+incompatible≥ 11.0.0, < 11.2.0≥ 11.0.1+incompatible, < 11.2.0+incompatible
| 10.11.910.11.9+incompatible11.2.011.2.0+incompatible
|
| mattermost server | ≥ 10.11.0, < 10.11.9
| 10.11.9
|
Description
Mattermost versions 10.11.x <= 10.11.8 fail to validate input size before processing hashtags which allows an authenticated attacker to exhaust CPU resources via a single HTTP request containing a post with thousands space-separated tokens.
NVD description
Mattermost versions 10.11.x <= 10.11.8 fail to validate input size before processing hashtags which allows an authenticated attacker to exhaust CPU resources via a single HTTP request containing a post with thousands space-separated tokens
Altre vulnerabilità di github.com/mattermost/mattermost-server
Vedi tutto →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free