CVE-2024-22091

Published: 2024-04-26T09:15Z

Last Modified: 2024-11-21T08:55Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Mattermost versions 8.1.x <= 8.1.10, 9.6.x <= 9.6.0, 9.5.x <= 9.5.2 and 8.1.x <= 8.1.11 fail to limit the size of a request path that includes user inputs which allows an attacker to cause excessive resource consumption, possibly leading to a DoS via sending large request paths > MITRE Terms of Use apply – see LICENSE‑MITRE.txt