Vulnerability Database
289,784
Total vulnerabilities in the database
CVE-2024-1402
Mattermost fails to check if a custom emoji reaction exists when sending it to a post and to limit the amount of custom emojis allowed to be added in a post, allowing an attacker sending a huge amount of non-existent custom emojis in a post to crash the mobile app of a user seeing the post and to crash the server due to overloading when clients attempt to retrive the aforementioned post.
| Software | From | Fixed in |
|---|---|---|
github.com/mattermost/mattermost/server/v8
|
- | 8.1.8 |
|
github.com/mattermost/mattermost/server/v8
|
9.2.0 | 9.2.4 |
|
github.com/mattermost/mattermost/server/v8
|
9.1.0 | 9.1.5 |
| mattermost / mattermost_server | - | 8.1.7.x |
| mattermost / mattermost_server | 9.0.0 | 9.1.4.x |
| mattermost / mattermost_server | 9.2.0 | 9.2.3.x |
- https://github.com/mattermost/mattermost/commit/64cb0ca8af2dbda1afcddd1604460591a4799b81
- https://github.com/mattermost/mattermost/commit/6d2440de9fd774b67e65e3aac4ab8b6ef9aba2d8
- https://github.com/mattermost/mattermost/commit/81190e2da128a6985914ea7023a69ac400513fc4
- https://mattermost.com/security-updates