Skip to content
OpenAdvisories
Medium · 4.3 CVE-2023-45847 EUVD-2023-50117GHSA-h755-qgp7-rc2g

Playbook Plugin Crash via Run Checklist

Published Dec 12, 2023 · Updated Dec 2, 2024 · Assigned by Mattermost

Description

Mattermost fails to to check the length when setting the title in a run checklist in Playbooks, allowing an attacker to send a specially crafted request and crash the Playbooks plugin

Affected products

VendorProductAffectedFixed
Mattermost Mattermost ≤ 8.1.5, ≤ 9.0.3, ≤ 9.1.2, ≤ 9.2.1 9.2.2

References