Mattermost Server is vulnerable to a Denial of Service attack through `invite_people` command in github.com/mattermost/mattermost-server
Mattermost Server is vulnerable to a Denial of Service attack through `invite_people` command in github.com/mattermost/mattermost-server
02 / AFFECTED SOFTWARE
Affected packages
15 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
An issue was discovered in Mattermost Server before 5.1. It allows attackers to cause a denial of service via the invite_people slash command.
Mattermost Server is vulnerable to a Denial of Service attack through `invite_people` command in github.com/mattermost/mattermost-server
An issue was discovered in Mattermost Server before 5.1.0. It allows attackers to cause a denial of service via the invite_people slash command.
05 / REFERENCES
Further evidence
- https://mattermost.com/security-updates/
- https://github.com/advisories/GHSA-5mh6-p63g-3mv5
- https://github.com/mattermost/mattermost/commit/af615ffc24b774d76deef8c93282831432669dd8
- https://mattermost.com/security-updates
- https://nvd.nist.gov/vuln/detail/CVE-2018-21258
- https://github.com/mattermost/mattermost