Skip to content
OpenAdvisories
Low · 3.5 CVE-2022-1333 EUVD-2022-24659GHSA-rr84-59x2-rrf4

A specifically drafted Playbook could trigger large amount of webhook requests leading to Denial of Service

Published Apr 13, 2022 · Updated Dec 6, 2024 · Assigned by Mattermost

Description

Mattermost Playbooks plugin v1.24.0 and earlier fails to properly check the limit on the number of webhooks, which allows authenticated and authorized users to create a specifically drafted Playbook which could trigger a large amount of webhook requests leading to Denial of Service.

Affected products

VendorProductAffectedFixed
Mattermost Mattermost Playbooks Playbooks – ≤ 1.24 —

References