CVE-2024-22091CWE-400

Excessive resource consumption due to lack to request path size limits

Low · published April 26, 2024

CVSS v3.1
3.1
EPSS
1%
Percentile
44.5
In the wild
Unconfirmed
What it is

Mattermost versions 8.1.x <= 8.1.10, 9.6.x <= 9.6.0, 9.5.x <= 9.5.2 and 8.1.x <= 8.1.11 fail to limit the size of a request path that includes user inputs which allows an attacker to cause excessive resource consumption, possibly leading to a DoS via sending large request paths

The record
Technical detail
CVSS v3.1
3.1 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00537 · 44.5th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2024-04-26T08:24Z
EPSS history
Timeline
  • 26 APR 08:24Z
    Excessive resource consumption due to lack to request path size limits
    cvelistv5