Unrated severityNVD Advisory· Published Sep 9, 2022· Updated Dec 6, 2024
Server-side Denial of Service while processing a specifically crafted JPEG file
CVE-2022-3147
Description
Mattermost version 7.0.x and earlier fails to sufficiently limit the in-memory sizes of concurrently uploaded JPEG images, which allows authenticated users to cause resource exhaustion on specific system configurations, resulting in server-side Denial of Service.
Affected products
1- Range: unspecified
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- hackerone.com/reports/1549513mitrex_refsource_MISC
- mattermost.com/security-updates/mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.