4.3
Medium
CVE-2022-4019 A denial-of-service vulnerability in the Mattermost Playbooks plugin allows an authenticated user to crash the server…
Description
A denial-of-service vulnerability in the Mattermost Playbooks plugin allows an authenticated user to crash the server via multiple large requests to one of the Playbooks API endpoints.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Playbooks Plugin 7.4 | earliest → < 7.4.0 | 7.4.0 |
| Playbooks Plugin 7.3 | 7.3.0 → < 7.3.1 | 7.3.1 |
| Playbooks Plugin 7.2 | 7.2.0 → < 7.2.1 | 7.2.1 |
| Playbooks Plugin 7.1 | earliest → < 7.1.4 | 7.1.4 |
| Playbooks Plugin 1.0 | 1.0.0 → 7.1.3 | No fix stated |