PT-2022-25270 · Mattermost · Mattermost Playbooks Plugin

Vultza · Published 2022-11-23 · Updated 2022-11-26 · CVE-2022-4019

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Mattermost Playbooks plugin (affected versions not specified)

Description A denial-of-service issue in the Mattermost Playbooks plugin allows an authenticated user to crash the server via multiple large requests to one of the Playbooks API endpoints.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2022-4019

Affected Products

Mattermost Playbooks Plugin

References · 8

• https://mattermost.com/security-updates · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-4019 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-4019 · Security Note
• https://t.me/cvenotify/38313 · Telegram Post
• https://t.me/cibsecurity/53408 · Telegram Post
• https://t.me/cvenotify/38305 · Telegram Post
• https://t.me/cvenotify/38520 · Telegram Post
• https://hackerone.com/reports/1685979 · Note