CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 3.1. Exploitation may require the attacker to be authenticated. It may lead to a denial-of-service condition.
CVE
CVE-2022-3147
Severity
LOW
CVSS
3.1
EPSS
0.91%
Original NVD Description
Mattermost version 7.0.x and earlier fails to sufficiently limit the in-memory sizes of concurrently uploaded JPEG images, which allows authenticated users to cause resource exhaustion on specific system configurations, resulting in server-side Denial of Service.
Related CVEs
Other vulnerabilities affecting the same vendor(s)