← Database

CVE-2021-37865

MEDIUM CVSS: 4.3 Published: 2022-01-18 Modified: 2026-06-17

Description

Mattermost 6.2 and earlier fails to sufficiently process a specifically crafted GIF file when it is uploaded while drafting a post, which allows authenticated users to cause resource exhaustion while processing the file, resulting in server-side Denial of Service.

Affected Platforms

Mattermost Mattermost

Weakness Type

CWE-400, CWE-400

References