CVE-2022-2406 — Malicious imports can lead to Denial of Service
The legacy Slack import feature in Mattermost version 6.7.0 and earlier fails to properly limit the sizes of imported files, which allows an authenticated attacker to crash the …
Published: 2022-07-14 · CVSS: 4.3 · CVSS 3.1
The legacy Slack import feature in Mattermost version 6.7.0 and earlier fails to properly limit the sizes of imported files, which allows an authenticated attacker to crash the server by importing large files via the Slack import REST API.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7