VULNERABILITY INTELLIGENCE

CVE-2023-48268

CVSS score4.3 MEDIUM
EPSS probability0.72%
CISA KEVNot currently listed
Published2023-11-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Description

Mattermost fails to limit the amount of data extracted from compressed archives during board import in Mattermost Boards allowing an attacker to consume excessive resources, possibly leading to Denial of Service, by importing a board using a specially crafted zip (zip bomb).

Weakness classification

  • responsibledisclosure@mattermost.com: CWE-400
  • nvd@nist.gov: CWE-400

Primary references