CVE-2023-5196 — DoS via Channel Notification Properties
Mattermost fails to enforce character limits in all possible notification props allowing an attacker to send a really long value for a notification_prop resulting in the server …
Published: 2023-09-29 · CVSS: 6.5 · CVSS 3.1
Mattermost fails to enforce character limits in all possible notification props allowing an attacker to send a really long value for a notification_prop resulting in the server consuming an abnormal quantity of computing resources and possibly becoming temporarily unavailable for its users.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7