Skip to content
OpenAdvisories
Low · 3.1 CVE-2023-5876 EUVD-2023-58149GHSA-p8hg-mm67-hmp8

Regex DoS from a malicious server enrolled in Desktop

Published Nov 2, 2023 · Updated Sep 5, 2024 · Assigned by Mattermost

Description

Mattermost fails to properly validate a RegExp built off the server URL path, allowing an attacker in control of an enrolled server to mount a Denial Of Service.

Affected products

VendorProductAffectedFixed
Mattermost Mattermost Desktop ≤ 5.5.0 5.5.1

References