CVE-2023-5196 (published 2023-09-29T09:22:36.286Z)
Mattermost fails to enforce character limits in all possible notification props allowing an attacker to send a really long value for a notification_prop resulting in the server consuming an abnormal quantity of computing resources and possibly becoming temporarily unavailable for its users. 




Affected products: Vendor: Mattermost
Product: Mattermost
Versions: 0, 8.1.0, 0, 7.8.10, 8.1.1, 8.0.2