Vulnerabilities > CVE-2023-49607 - Improper Check for Unusual or Exceptional Conditions vulnerability in Mattermost Server

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
mattermost
CWE-754
NVD
Published: 2023-12-12
Updated: 2023-12-14

Summary

Mattermost fails to validate the type of the "reminder" body request parameter allowing an attacker to crash the Playbook Plugin when updating the status dialog.

Vulnerable Configurations

Part Description Count
Application
Mattermost
223

Common Weakness Enumeration (CWE)

References