CVE | CVE-2024-4183 |
CVE Title | |
Published Date | 2024-04-26T09:15Z |
Modified Date | 2024-04-26T12:58Z |
Description | Mattermost versions 8.1.x before 8.1.12, 9.6.x before 9.6.1, 9.5.x before 9.5.3, 9.4.x before 9.4.5 fail to limit the number of active sessions, which allows an authenticated attacker to crash the server via repeated requests to the getSessions API after flooding the sessions table. |
References | |
By clicking these links you will leave this website. We do not endorse and will not be held accountable for any activity on external sites. | |
Reference URL | https://mattermost.com/security-updates |
Reference Description | https://mattermost.com/security-updates |
Reference Description | |
Sources | NIST MITRE |
Note
- No CVSS data for this CVE