Skip to content
OpenAdvisories
Medium · 4.3 CVE-2023-2785 EUVD-2023-34241GHSA-8345-jr9c-vhph

Specially crafted search query can cause large log entries in postgres

Published Jun 16, 2023 · Updated Dec 6, 2024 · Assigned by Mattermost

Description

Mattermost fails to properly truncate the postgres error log message of a search query failure allowing an attacker to cause the creation of large log files which can result in Denial of Service

Affected products

VendorProductAffectedFixed
Mattermost Mattermost ≤ 7.1.9, ≤ 7.8.4, ≤ 7.9.3, 7.10.0 7.10.1

References