VDB
Sign up
MEDIUM6.5

GHSA-gwpf-95jc-63rv

Uncontrolled Resource Consumption in Mattermost server

Quick fix

GHSA-gwpf-95jc-63rv — github.com/mattermost/mattermost-server: upgrade to the fixed version with the command below.

go get github.com/mattermost/mattermost-server@v6.6.1

Details

Uncontrolled resource consumption in Mattermost version 6.6.0 and earlier allows an authenticated attacker to crash the server via a crafted SVG attachment on a post.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/mattermost/mattermost-server
Introduced in: 6.6.0Fixed in: 6.6.1
Fixgo get github.com/mattermost/mattermost-server@v6.6.1
Go/github.com/mattermost/mattermost-server
Introduced in: 6.5.0Fixed in: 6.5.1
Fixgo get github.com/mattermost/mattermost-server@v6.5.1
Go/github.com/mattermost/mattermost-server
Introduced in: 6.4.0Fixed in: 6.4.3
Fixgo get github.com/mattermost/mattermost-server@v6.4.3
Go/github.com/mattermost/mattermost-server
Introduced in: 5.0.0Fixed in: 6.3.8
Fixgo get github.com/mattermost/mattermost-server@v6.3.8

References