| Package | Affected versions | Patched versions |
|---|---|---|
| mattermost server | ≥ 8.1.0, < 8.1.10≥ 9.2.0, < 9.2.6≥ 9.3.0, < 9.3.2≥ 9.4.0, < 9.4.3 | 8.1.109.2.69.3.29.4.3 |
Mattermost versions 8.1.x before 8.1.10, 9.2.x before 9.2.6, 9.3.x before 9.3.2, and 9.4.x before 9.4.3 fail to limit the number of @-mentions processed per message, allowing an authenticated attacker to crash the client applications of other users via large, crafted messages.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free