NetSight
medium5.3

CVE-2022-0903

A call stack overflow bug in the SAML login feature in Mattermost server in versions up to and including 6.3.2 allows an attacker to crash the server via submi…

Impact

A call stack overflow bug in the SAML login feature in Mattermost server in versions up to and including 6.3.2 allows an attacker to crash the server via submitting a maliciously crafted POST body.

Affected products

VendorProductAffected versions
MattermostMattermost Server
before 5.37.8
from 6.0.0 before 6.1.3
from 6.2.0 before 6.2.3
from 6.3.0 before 6.3.3

Weakness classification

References