CVE-2022-3257 — Server-side Denial of Service while processing a specifically crafted GIF file
Mattermost version 7.1.x and earlier fails to sufficiently process a specifically crafted GIF file when it is uploaded while drafting a post, which allows authenticated users to…
Published: 2022-09-23 · CVSS: 3.1 · CVSS 3.1
Mattermost version 7.1.x and earlier fails to sufficiently process a specifically crafted GIF file when it is uploaded while drafting a post, which allows authenticated users to cause resource exhaustion while processing the file, resulting in server-side Denial of Service.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7