PT-2022-13515 · Mattermost · Mattermost Server

Juho Nurminen

·

CVE-2022-0903

·

Published

2022-03-09

·

Updated

2024-03-06

CVSS v3.1

5.3

Medium

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Mattermost server versions up to and including 6.3.2
Description A call stack overflow bug in the SAML login feature allows an attacker to crash the server by submitting a maliciously crafted POST body to the login endpoint.
Recommendations For versions up to and including 6.3.2, update to a version that contains a fix for this issue to prevent server crashes via malicious SAML login requests.

Exploit

Fix

DoS

Memory Corruption

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-787

Related Identifiers

BIT-MATTERMOST-2022-0903
CVE-2022-0903

Affected Products

Mattermost Server