Skip to content
OpenAdvisories
Medium · 4.3 CVE-2024-43105 EUVD-2024-2535GHSA-869f-px86-vj84GO-2024-3095

Excessive Resource Consumption via `/export`

Published Aug 23, 2024 · Updated Aug 23, 2024 · Assigned by Mattermost

Description

Mattermost Plugin Channel Export versions <=1.0.0 fail to restrict concurrent runs of the /export command which allows a user to consume excessive resource by running the /export command multiple times at once.

Affected products

VendorProductAffectedFixed
Mattermost Mattermost ≤ 1.0.0 1.0.1

Affected packages

EcosystemPackageAffectedFixedRecord
Go github.com/mattermost/mattermost-plugin-channel-export < 1.0.1 1.0.1 GHSA-869f-px86-vj84

References