CVE-2022-4019CWE-770

Authenticated user could send multiple requests containing a large payload to a Playbooks API and can crash a Mattermost server

Medium · published November 23, 2022

CVSS v3.1
4.3
EPSS
1%
Percentile
55.3
In the wild
Unconfirmed
What it is

A denial-of-service vulnerability in the Mattermost Playbooks plugin allows an authenticated user to crash the server via multiple large requests to one of the Playbooks API endpoints.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00774 · 55.3th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2022-11-23T05:32Z
EPSS history
Timeline
  • 23 NOV 05:32Z
    Authenticated user could send multiple requests containing a large payload to a Playbooks API and can crash a Mattermost server
    cvelistv5