CVE-2019-20871: High severity mattermost vulnerability
An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. The Markdown library allows catastrophic backtracking.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-20871?
CVE-2019-20871 is classified as a medium to high severity vulnerability due to its potential for denial of service through catastrophic backtracking.
How do I fix CVE-2019-20871?
To fix CVE-2019-20871, upgrade to Mattermost Server version 5.9.0 or later, or apply the relevant patches provided by Mattermost.
What versions of Mattermost are affected by CVE-2019-20871?
Mattermost Server versions prior to 5.9.0, 5.8.1, 5.7.3, and 4.10.8 are affected by CVE-2019-20871.
What type of vulnerability is CVE-2019-20871?
CVE-2019-20871 is a denial of service vulnerability related to the Markdown library used in Mattermost Server.
Is there a workaround for CVE-2019-20871?
While the best course of action is to upgrade, you may review your instance's configurations, though there are no officially recommended workarounds for this vulnerability.