CVE-2022-1333CWE-770

A specifically drafted Playbook could trigger large amount of webhook requests leading to Denial of Service

Low · published April 13, 2022

CVSS v3.1
3.5
EPSS
1%
Percentile
53.9
In the wild
Unconfirmed
What it is

Mattermost Playbooks plugin v1.24.0 and earlier fails to properly check the limit on the number of webhooks, which allows authenticated and authorized users to create a specifically drafted Playbook which could trigger a large amount of webhook requests leading to Denial of Service.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00735 · 53.9th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2022-04-13T17:06Z
EPSS history
Timeline
  • 13 APR 17:06Z
    A specifically drafted Playbook could trigger large amount of webhook requests leading to Denial of Service
    cvelistv5