PT-2023-31272 · Unknown+1 · Mattermost+1

·

CVE-2023-49607

·

Published

2023-12-12

·

Updated

2024-03-06

CVSS v3.1

4.3

Medium

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions Mattermost (affected versions not specified)
Description The issue arises from the failure to validate the type of the reminder body request parameter, which allows an attacker to crash the Playbook Plugin when updating the status dialog.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Improper Check for Exceptional Conditions

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BIT-MATTERMOST-2023-49607
CVE-2023-49607

Affected Products

Mattermost
Playbook Plugin