Mattermost 6.2 and earlier fails to sufficiently process a specifically crafted GIF file when it is uploaded while drafting a post, which allows authenticated users to cause resource exhaustion while processing the file, resulting in server-side Denial of Service.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: Mattermost
Published: 2022-01-18T16:51:48
Updated: 2024-08-04T01:30:08.496Z
Reserved: 2021-08-02T00:00:00
Link: CVE-2021-37865
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2022-01-18T17:15:08.457
Modified: 2022-01-24T17:58:43.297
Link: CVE-2021-37865
Redhat
No data.