← Database

CVE-2022-3257

LOW CVSS: 3.1 Published: 2022-09-23 Modified: 2026-06-17

Description

Mattermost version 7.1.x and earlier fails to sufficiently process a specifically crafted GIF file when it is uploaded while drafting a post, which allows authenticated users to cause resource exhaustion while processing the file, resulting in server-side Denial of Service.

Affected Platforms

Mattermost Mattermost Server

Weakness Type

CWE-400, CWE-434

References