NetSight
medium4.3

CVE-2023-2831

Mattermost fails to unescape Markdown strings in a memory-efficient way, allowing an attacker to cause a Denial of Service by sending a message containing a la…

Impact

Mattermost fails to unescape Markdown strings in a memory-efficient way, allowing an attacker to cause a Denial of Service by sending a message containing a large number of escaped characters.

Affected products

VendorProductAffected versions
MattermostMattermost
from 7.1.0 through 7.1.9
from 7.8.0 through 7.8.4
from 7.9.0 through 7.9.3
Version 7.10.0

Weakness classification

References