Skip to content
OpenAdvisories
Medium · 5.3 CVE-2022-0903 EUVD-2022-15935GHSA-8wqp-c6pq-684g

Stack overflow in SAML login in Mattermost

Published Mar 9, 2022 · Updated Dec 6, 2024 · Assigned by Mattermost

Description

A call stack overflow bug in the SAML login feature in Mattermost server in versions up to and including 6.3.2 allows an attacker to crash the server via submitting a maliciously crafted POST body.

Affected products

VendorProductAffectedFixed
Mattermost Mattermost 6.3 – < 6.3.3, 6.2 – < 6.2.3, 6.1 – < 6.1.3, 5.37 – < 5.37.8 6.3.3

References