Skip to content
OpenAdvisories
Medium · 4.3 CVE-2023-2831 EUVD-2023-34282GHSA-4qcm-px3r-jfr8

Denial of Service while unescaping a Markdown string

Published Jun 16, 2023 · Updated Dec 6, 2024 · Assigned by Mattermost

Description

Mattermost fails to unescape Markdown strings in a memory-efficient way, allowing an attacker to cause a Denial of Service by sending a message containing a large number of escaped characters.

Affected products

VendorProductAffectedFixed
Mattermost Mattermost ≤ 7.1.9, ≤ 7.8.4, ≤ 7.9.3, 7.10.0 7.1.10

References