CVE-2023-49809 — Todo plugin gets crashed and disabled by member
Mattermost fails to handle a null request body in the /add endpoint, allowing a simple member to send a request with null request body to that endpoint and make it crash. After …
Published: 2023-12-12 · CVSS: 4.3 · CVSS 3.1
Mattermost fails to handle a null request body in the /add endpoint, allowing a simple member to send a request with null request body to that endpoint and make it crash. After a few repetitions, the plugin is disabled.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7