CVE Catalog
CVE-2023-3614
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.32%
23th percentile - higher than 23% of all known CVEs
Summary
Mattermost fails to properly validate a gif image file, allowing an attacker to consume a significant amount of server resources, making the server unresponsive for an extended period of time.
Risk Assessment
An attacker can cause the server to become unresponsive, impacting service availability for users.
Recommendation
It is recommended to update Mattermost to the latest version that improves gif file validation and to monitor server resources for potential attacks.
Original NVD description (English source)
Mattermost fails to properly validate a gif image file, allowing an attacker to consume a significant amount of server resources, making the server unresponsive for an extended period of time by linking to specially crafted image file.