Threats tagged 'ghsa-58rp-9f6f-pw76'

Mattermost versions 11.9.x up to 11.9.1, 11.8.x up to 11.8.5, 11.7.x up to 11.7.10, and 11.10.x up to 11.10.1 contain a vulnerability where the application fails to properly bind the volume of text extracted from an uploaded PDF. This flaw allows an authenticated user to cause a denial of service by uploading a crafted PDF whose compressed content stream expands into a very large amount of text, exhausting server memory.