Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Mattermost fails to properly limit the characters allowed in different fields of a block in Mattermost Boards allowing a attacker to consume excessive resources, possibly leading to Denial of Service, by patching the field of a block using a specially crafted string.

CVE-2023-40703 is a vulnerability identified in Mattermost, an open-source collaboration platform widely used for team communication and project management. The vulnerability is categorized under CWE-400, which pertains to uncontrolled resource consumption. Specifically, the issue arises in the Mattermost Boards feature, where the application fails to properly limit the number of characters allowed in different fields of a block. An attacker can exploit this by submitting a specially crafted string to patch a block's field, causing the system to consume excessive resources. This resource exhaustion can degrade system performance or lead to a Denial of Service (DoS) condition, where legitimate users are unable to access or use the service effectively. The vulnerability does not impact confidentiality or integrity directly but affects availability. The CVSS v3.1 base score is 4.3 (medium severity), reflecting that the attack can be performed remotely over the network (AV:N) with low attack complexity (AC:L), requires privileges (PR:L), and does not require user interaction (UI:N). The scope remains unchanged (S:U), and the impact is limited to availability (A:L) with no confidentiality or integrity impact. No known exploits are currently reported in the wild, and no patches have been linked yet. The affected versions are not explicitly detailed, but the vulnerability is present in Mattermost's Boards component. Given the nature of the vulnerability, it is likely that an authenticated user with some level of privileges can trigger the resource exhaustion by submitting oversized input fields, which the system fails to properly validate or limit.

Detailed information about CVE-2023-40703: CWE-400: Uncontrolled Resource Consumption in Mattermost Mattermost affecting Mattermost Mattermost. Get real-time up

CVE-2023-40703: CWE-400: Uncontrolled Resource Consumption in Mattermost Mattermost - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-40703: CWE-400: Uncontrolled Resource Consumption in Mattermost Mattermost

Threats Tagged 'cve-2023-40703'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2023-40703'

Lead Pen Test Professional