NetSight
medium5.5

CVE-2019-20860

An issue was discovered in Mattermost Server before 5.14.0, 5.13.3, 5.12.6, and 5.9.4.

Impact

An issue was discovered in Mattermost Server before 5.14.0, 5.13.3, 5.12.6, and 5.9.4. It allows remote attackers to cause a denial of service (application hang) via a crafted SVG document.

Affected products

VendorProductAffected versions
MattermostMattermost Server
before 5.9.4
from 5.12.0 before 5.12.6
from 5.13.0 before 5.13.3
Version 5.14.0

References