CVE-2023-49809 (published 2023-12-12T08:20:08.321Z)
Mattermost fails to handle a null request body in the /add endpoint, allowing a simple member to send a request with null request body to that endpoint and make it crash. After a few repetitions, the plugin is disabled. 


Affected products: Vendor: Mattermost
Product: Mattermost
Versions: 0, 8.1.6, 9.2.0