Low severity3.1NVD Advisory· Published Sep 9, 2022· Updated Jun 17, 2026
CVE-2022-3147
CVE-2022-3147
Description
Mattermost version 7.0.x and earlier fails to sufficiently limit the in-memory sizes of concurrently uploaded JPEG images, which allows authenticated users to cause resource exhaustion on specific system configurations, resulting in server-side Denial of Service.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4<=7.0.x+ 2 more
- (no CPE)range: <=7.0.x
- (no CPE)range: unspecified
- cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*range: <7.1.0
Patches
Vulnerability mechanics
References
2- mattermost.com/security-updates/nvdVendor Advisory
- hackerone.com/reports/1549513nvdPermissions Required
News mentions
0No linked articles in our index yet.