Skip to content
OpenAdvisories
Medium · 4.3 CVE-2021-37865 EUVD-2021-24343GHSA-jqq9-5hrp-9jg8

Server-side Denial of Service while processing a specifically crafted GIF file

Published Jan 18, 2022 · Updated Dec 6, 2024 · Assigned by Mattermost

Description

Mattermost 6.2 and earlier fails to sufficiently process a specifically crafted GIF file when it is uploaded while drafting a post, which allows authenticated users to cause resource exhaustion while processing the file, resulting in server-side Denial of Service.

Affected products

VendorProductAffectedFixed
Mattermost Mattermost unspecified – ≤ 6.2 —

References