Mattermost Server up to 5.21.x Markdown Renderer denial of service

entryeditHistoryDiffjsonxmlCTI

A vulnerability, which was classified as problematic, was found in Mattermost Server up to 5.21.x. Affected is some unknown functionality of the component Markdown Renderer. Upgrading to version 5.22.0 eliminates this vulnerability.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

Field

Commit Conf

Approve Conf

ID	Commited	User	Field	Change	Remarks	Moderated	Reason	C
10561195	10/25/2020	VulD...	confirm_url	https://mattermost.com/security-updates/	cve.mitre.org	10/25/2020	accepted	70
10188059	06/20/2020	VulD...	cwe	404 (denial of service)		06/20/2020	accepted	90
10188057	06/20/2020	VulD...	cve_nvd_summary	An issue was discovered in Mattermost Server before 5.22.0. The markdown renderer allows attackers to cause a denial of service (client-side), aka MMSA-2020-0017.	mitre.org	06/20/2020	accepted	100
10188056	06/20/2020	VulD...	cve_assigned	1592524800	mitre.org	06/20/2020	accepted	100
10188049	06/20/2020	VulD...	cvss3_nvd_a	H	nist.gov	06/20/2020	accepted	100
10188048	06/20/2020	VulD...	cvss3_nvd_i	N	nist.gov	06/20/2020	accepted	100
10188047	06/20/2020	VulD...	cvss3_nvd_c	N	nist.gov	06/20/2020	accepted	100
10188046	06/20/2020	VulD...	cvss3_nvd_s	U	nist.gov	06/20/2020	accepted	100
10188045	06/20/2020	VulD...	cvss3_nvd_ui	N	nist.gov	06/20/2020	accepted	100
10188044	06/20/2020	VulD...	cvss3_nvd_pr	N	nist.gov	06/20/2020	accepted	100
10188043	06/20/2020	VulD...	cvss3_nvd_ac	L	nist.gov	06/20/2020	accepted	100
10188042	06/20/2020	VulD...	cvss3_nvd_av	N	nist.gov	06/20/2020	accepted	100
10188029	06/20/2020	VulD...	cvss2_nvd_ai	P	nist.gov	06/20/2020	accepted	100
10188028	06/20/2020	VulD...	cvss2_nvd_ii	N	nist.gov	06/20/2020	accepted	100
10188027	06/20/2020	VulD...	cvss2_nvd_ci	N	nist.gov	06/20/2020	accepted	100
10188026	06/20/2020	VulD...	cvss2_nvd_au	N	nist.gov	06/20/2020	accepted	100
10188025	06/20/2020	VulD...	cvss2_nvd_ac	L	nist.gov	06/20/2020	accepted	100
10188024	06/20/2020	VulD...	cvss2_nvd_av	N	nist.gov	06/20/2020	accepted	100
10188067	06/20/2020	VulD...	cvss3_nvd_basescore	7.5	nist.gov	06/20/2020	accepted	90
10188066	06/20/2020	VulD...	cvss3_vuldb_rc	X		06/20/2020	accepted	90