CVE Catalog

CVE-2023-3593

MediumCVSS 4.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.50%

39th percentile - higher than 39% of all known CVEs

Summary

Mattermost fails to properly validate markdown, allowing an attacker to crash the server via a specially crafted markdown input.

Risk Assessment

An attacker can cause service disruption, impacting the organization's operational continuity.

Recommendation

It is recommended to update Mattermost to the latest version to patch this vulnerability.

Original NVD description (English source)

Mattermost fails to properly validate markdown, allowing an attacker to crash the server via a specially crafted markdown input.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS