Vulnerabilities > CVE-2022-0903 - Out-of-bounds Write vulnerability in Mattermost Server

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
mattermost
CWE-787
NVD
Published: 2022-03-10
Updated: 2022-03-15

Summary

A call stack overflow bug in the SAML login feature in Mattermost server in versions up to and including 6.3.2 allows an attacker to crash the server via submitting a maliciously crafted POST body.

Vulnerable Configurations

Part Description Count
Application
Mattermost
587

Common Weakness Enumeration (CWE)

References