CVE-2023-49607

HIGH7.5EPSS 0.11%
Published: 3/6/2024Modified: 4/3/2025

Description

Mattermost fails to validate the type of the "reminder" body request parameter allowing an attacker to crash the Playbook Plugin when updating the status dialog.

Affected packages (1)

  • Bitnami/mattermostfrom 0, < 7.8.15, >= 8.0.0, < 8.1.6, >= 9.0.0, < 9.0.4, >= 9.1.0, < 9.1.3, >= 9.2.0, < 9.2.2

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1HIGH7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References (2)