Description
A call stack overflow bug in the SAML login feature in Mattermost server in versions up to and including 6.3.2 allows an attacker to crash the server via submitting a maliciously crafted POST body.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Mattermost | Mattermost | 6.3 – < 6.3.3, 6.2 – < 6.2.3, 6.1 – < 6.1.3, 5.37 – < 5.37.8 | 6.3.3 |