CyberRota Analysis
AI-GeneratedMattermost versions 11.9.x up to 11.9.1, 11.8.x up to 11.8.5, 11.7.x up to 11.7.10, and 11.10.x up to 11.10.1 are vulnerable due to inadequate enforcement of request body size limits during CSRF validation for plugin requests. This flaw allows authenticated users to send excessively large request bodies, potentially exhausting server memory and leading to a denial of service. Organizations using these Mattermost versions should prioritize patching to mitigate the risk of service disruption.
Original NVD Description
Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to enforce a request body size limit during CSRF validation of plugin requests which allows an authenticated user to exhaust server memory and cause a denial of service via a large request body sent to a plugin endpoint.. Mattermost Advisory ID: MMSA-2026-00775
Related CVEs
Other vulnerabilities affecting the same vendor(s)