CVE-2023-40703
MediumCVSS 4.3Summary
Mattermost fails to properly limit the characters allowed in different fields of a block in Mattermost Boards. An attacker can patch a block field using a specially crafted string to consume excessive resources, possibly leading to Denial of Service.
Risk Assessment
Potential resource exhaustion and unavailability of Mattermost Boards by an attacker, disrupting organizational operations.
Recommendation
Update Mattermost to a version containing the fix for CVE-2023-40703. Monitor for unusual resource consumption related to Boards.
Other vulnerabilities in Mattermost Boards
See allOriginal NVD description (English source)
Mattermost fails to properly limit the characters allowed in different fields of a block in Mattermost Boards allowing a attacker to consume excessive resources, possibly leading to Denial of Service, by patching the field of a block using a specially crafted string.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS