Mattermost · Mattermost · CVE-2024-22091
**Name of the Vulnerable Software and Affected Versions**
Mattermost versions 8.1.x through 8.1.11
Mattermost versions 9.5.x through 9.5.2
Mattermost versions 9.6.x through 9.6.0
**Description**
The issue arises from the failure to limit the size of a request path that includes user inputs, allowing an attacker to cause excessive resource consumption, possibly leading to a denial of service (DoS) via sending large request paths. This affects the Mattermost server, specifically the request path handling.
**Recommendations**
For versions 8.1.x through 8.1.11, update to a version later than 8.1.11 to resolve the issue.
For versions 9.5.x through 9.5.2, update to a version later than 9.5.2 to resolve the issue.
For versions 9.6.x through 9.6.0, update to a version later than 9.6.0 to resolve the issue.