CVE-2022-4019

A denial-of-service vulnerability in the Mattermost Playbooks plugin allows an authenticated user to crash the server via multiple large requests to one of the Playbooks API endpoints.

Score

CVSS 3.1 6.5 Medium

Status

Modified - responsibledisclosure@mattermost.com

Published

2022-11-23

Last modified

2024-12-06

Weaknesses

CWE-770

Affected products

• Mattermost (Mattermost)
• Playbooks Plugin (Mattermost)

References

• https://hackerone.com/reports/1685979
• https://mattermost.com/security-updates/