Total vulnerabilities in the database
The image proxy component in Mattermost version 6.4.1 and earlier allocates memory for multiple copies of a proxied image, which allows an authenticated attacker to crash the server via links to very large image files.
Software | From | Fixed in |
---|---|---|
mattermost / mattermost_server | 6.2.0 | 6.2.5 |
mattermost / mattermost_server | 6.4.0 | 6.4.2 |
mattermost / mattermost_server | 6.3.0 | 6.3.5 |
mattermost / mattermost_server | 5.37.0 | 5.37.9 |
![]() |
- | 6.4.2 |