CVE-2022-3147 — Server-side Denial of Service while processing a specifically crafted JPEG file
Mattermost version 7.0.x and earlier fails to sufficiently limit the in-memory sizes of concurrently uploaded JPEG images, which allows authenticated users to cause resource exh…
Published: 2022-09-09 · CVSS: 3.1 · CVSS 3.1
Mattermost version 7.0.x and earlier fails to sufficiently limit the in-memory sizes of concurrently uploaded JPEG images, which allows authenticated users to cause resource exhaustion on specific system configurations, resulting in server-side Denial of Service.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7