CVE-2022-4044 MEDIUM

CVE-2022-4044: Authenticated user could send multiple requests containing a large Auto Responder Message payload and can crash a Mattermost server

Vendor Mattermost
Product Mattermost
Weakness CWE-770 · Uncontrolled resource consumption
Published November 23, 2022
Last update December 6, 2024
View on NVD All CVEs

CVSS base score

4.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

What the vulnerability does

01Description

A denial-of-service vulnerability in Mattermost allows an authenticated user to crash the server via multiple large autoresponder messages.

Key dates

02Disclosure timeline

November 23, 2022 CVE published
December 6, 2024 Record updated