CVE-2023-48369

MEDIUM5.3EPSS 0.08%

Mattermost Uncontrolled Resource Consumption vulnerability

Published: 11/27/2023Modified: 2/4/2026

Also known as:GHSA-3487-3j7c-7gwjCGA-3h8f-5cr2-6g44

Description

Mattermost fails to limit the log size of server logs allowing an attacker sending specially crafted requests to different endpoints to potentially overflow the log.

Affected packages (2)

Go/github.com/mattermost/mattermost-server/v6from 0, < 7.8.13
Go/github.com/mattermost/mattermost/server/v8>= 9.1.0, < 9.1.1

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	MEDIUM5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

References (3)

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2023-48369
PATCHhttps://github.com/mattermost/mattermost
WEBhttps://mattermost.com/security-updates