CVE-2026-14298

6.5 Moyenne

Publiée le 13/08/2026 à 11:17 · Modifiée le 14/09/2026 à 13:17 · Modifiée · Source : responsibledisclosure@mattermost.com

Description

Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 fail to limit decompressed content size and enforce the configured maximum file size in the Boards archive import handler, which allows an authenticated user to cause memory exhaustion or unbounded disk consumption via a crafted .boardarchive file uploaded to the import endpoint.. Mattermost Advisory ID: MMSA-2026-00713

Traduire en français

Produits concernés

Mattermost
Mattermost mattermost server

Scores CVSS

Version	Score	Source	Vecteur
3.1	6.5 Moyenne	responsibledisclosure@mattermost.com	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H`

Faiblesses (CWE)

CWE-409

Références

https://mattermost.com/security-updates Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories