CVE-2022-1333

Mattermost Playbooks plugin v1.24.0 and earlier fails to properly check the limit on the number of webhooks, which allows authenticated and authorized users to create a specifically drafted Playbook which could trigger a large amount of webhook requests leading to Denial of Service.

Score

CVSS 3.1 6.5 Medium

Status

Modified - responsibledisclosure@mattermost.com

Published

2022-04-13

Last modified

2024-12-06

Weaknesses

CWE-770

Affected products

• Mattermost Playbooks (Mattermost)
• Playbooks (Mattermost)

References

• https://mattermost.com/security-updates/