CVE-2023-5333 — Denial of Service via multiple identical User IDs in /api/v4/users/ids
Mattermost fails to deduplicate input IDs allowing a simple user to cause the application to consume excessive resources and possibly crash by sending a specially crafted reques…
Published: 2023-10-09 · CVSS: 4.3 · CVSS 3.1
Mattermost fails to deduplicate input IDs allowing a simple user to cause the application to consume excessive resources and possibly crash by sending a specially crafted request to /api/v4/users/ids with multiple identical IDs.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7