PT-2026-91142
CVE-2026-12882
·
تاريخ النشر
2026-09-14
·
تاريخ التحديث
2026-09-14
الوصف من
CVSS 3.1
4.3
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions
Mattermost version 11.9.0
Mattermost version 11.8.4
Mattermost version 11.7.7
Mattermost version 10.11.22
Description
An issue exists where the software fails to parse Markdown autolinks containing unmatched trailing closing parentheses in linear time. This allows an authenticated user with permissions to create posts to cause excessive server CPU consumption and degrade service availability for other users by submitting specially crafted post or message attachment content.
Recommendations
Update Mattermost version 11.9.0 to a newer version.
Update Mattermost version 11.8.4 to a newer version.
Update Mattermost version 11.7.7 to a newer version.
Update Mattermost version 10.11.22 to a newer version.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾