Mattermost Server up to 4.10.3/5.1.1/5.2.1 Image Dimension resource consumption

entryeditHistoryDiffjsonxmlCTI

A vulnerability was found in Mattermost Server up to 4.10.3/5.1.1/5.2.1. It has been declared as problematic. This vulnerability affects an unknown code of the component Image Dimension Handler. Upgrading to version 4.10.4, 5.1.2 or 5.2.2 eliminates this vulnerability.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

Field

Commit Conf

Approve Conf

ID	Commited	User	Field	Change	Remarks	Moderated	Reason	C
10561127	10/25/2020	VulD...	confirm_url	https://mattermost.com/security-updates/	cve.mitre.org	10/25/2020	accepted	70
10184239	06/19/2020	VulD...	cve_nvd_summary	An issue was discovered in Mattermost Server before 5.2.2, 5.1.2, and 4.10.4. It allows remote attackers to cause a denial of service (memory consumption) via crafted image dimensions.	mitre.org	06/19/2020	accepted	100
10184238	06/19/2020	VulD...	cve_assigned	1592524800	mitre.org	06/19/2020	accepted	100
10184231	06/19/2020	VulD...	cvss3_nvd_a	H	nist.gov	06/19/2020	accepted	100
10184230	06/19/2020	VulD...	cvss3_nvd_i	N	nist.gov	06/19/2020	accepted	100
10184229	06/19/2020	VulD...	cvss3_nvd_c	N	nist.gov	06/19/2020	accepted	100
10184228	06/19/2020	VulD...	cvss3_nvd_s	U	nist.gov	06/19/2020	accepted	100
10184227	06/19/2020	VulD...	cvss3_nvd_ui	R	nist.gov	06/19/2020	accepted	100
10184226	06/19/2020	VulD...	cvss3_nvd_pr	N	nist.gov	06/19/2020	accepted	100
10184225	06/19/2020	VulD...	cvss3_nvd_ac	L	nist.gov	06/19/2020	accepted	100
10184224	06/19/2020	VulD...	cvss3_nvd_av	N	nist.gov	06/19/2020	accepted	100
10184211	06/19/2020	VulD...	cvss2_nvd_ai	P	nist.gov	06/19/2020	accepted	100
10184210	06/19/2020	VulD...	cvss2_nvd_ii	N	nist.gov	06/19/2020	accepted	100
10184209	06/19/2020	VulD...	cvss2_nvd_ci	N	nist.gov	06/19/2020	accepted	100
10184208	06/19/2020	VulD...	cvss2_nvd_au	N	nist.gov	06/19/2020	accepted	100
10184207	06/19/2020	VulD...	cvss2_nvd_ac	M	nist.gov	06/19/2020	accepted	100
10184206	06/19/2020	VulD...	cvss2_nvd_av	N	nist.gov	06/19/2020	accepted	100
10184196	06/19/2020	VulD...	cwe	400 (denial of service)		06/19/2020	accepted	100
10184248	06/19/2020	VulD...	cvss3_nvd_basescore	6.5	nist.gov	06/19/2020	accepted	90
10184247	06/19/2020	VulD...	cvss3_vuldb_rc	X		06/19/2020	accepted	90