Skip to content
OpenAdvisories
Medium · 4.3 CVE-2022-0904 EUVD-2022-15936GHSA-c96x-c679-gx9j

Stack overflow in document extractor in Mattermost

Published Mar 9, 2022 · Updated Dec 6, 2024 · Assigned by Mattermost

Description

A stack overflow bug in the document extractor in Mattermost Server in versions up to and including 6.3.2 allows an attacker to crash the server via submitting a maliciously crafted Apple Pages document.

Affected products

VendorProductAffectedFixed
Mattermost Mattermost 6.3 – < 6.3.3, 6.2 – < 6.2.3, 6.1 – < 6.1.3, 5.37 – < 5.37.8 6.3.3

References