CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 3.1. Exploitation may require the attacker to be authenticated. It may lead to a denial-of-service condition.
CVE
CVE-2022-3257
Severity
LOW
CVSS
3.1
EPSS
1.14%
Original NVD Description
Mattermost version 7.1.x and earlier fails to sufficiently process a specifically crafted GIF file when it is uploaded while drafting a post, which allows authenticated users to cause resource exhaustion while processing the file, resulting in server-side Denial of Service.
Related CVEs
Other vulnerabilities affecting the same vendor(s)