CVE-2023-3614CWE-400

Denial of Service via specially crafted gif image

Medium · published July 17, 2023

CVSS v3.1
4.3
EPSS
0%
Percentile
27.6
In the wild
Unconfirmed
What it is

Mattermost fails to properly validate a gif image file, allowing an attacker to consume a significant amount of server resources, making the server unresponsive for an extended period of time by linking to specially crafted image file.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00351 · 27.6th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2023-07-17T15:32Z
EPSS history
Timeline
  • 17 JUL 15:32Z
    Denial of Service via specially crafted gif image
    cvelistv5