CVE-2023-5333 (published 2023-10-09T10:41:36.597Z)
Mattermost fails to deduplicate input IDs allowing a simple user to cause the application to consume excessive resources and possibly crash by sending a specially crafted request to /api/v4/users/ids with multiple identical IDs. 


Affected products: Vendor: Mattermost
Product: Mattermost
Versions: 0, 0, 0, 7.8.11, 8.0.3, 8.1.2