CVE-2023-5330

Name of the Vulnerable Software and Affected Versions Mattermost (affected versions not specified)

Description The issue arises from the failure to enforce a limit for the size of the cache entry for OpenGraph data. This allows an attacker to send a specially crafted request to the "/api/v4/opengraph" endpoint, filling the cache and potentially turning the server unavailable.

Recommendations As a temporary workaround, consider restricting access to the "/api/v4/opengraph" endpoint until a patch is available. Avoid using the OpenGraph data cache until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.