CVE-2019-20888: High severity mattermost vulnerability
Published Jun 19, 2020
·Updated
An issue was discovered in Mattermost Server before 5.7, 5.6.3, 5.5.2, and 4.10.5. It allows attackers to cause a denial of service (memory consumption) via an outgoing webhook or a slash command integration.
Affected Software
9 affected components
Mattermost Mattermost Server<4.10.5
Mattermost Mattermost Server>=5.5.0<5.5.2
Mattermost Mattermost Server>=5.6.0<5.6.3
Mattermost Mattermost Server=5.7.0-rc1
Mattermost Mattermost Server=5.7.0-rc2
Mattermost Mattermost Server=5.7.0-rc3
Mattermost Mattermost Server=5.7.0-rc4
Mattermost Mattermost Server=5.7.0-rc5
Mattermost Mattermost Server=5.7.0-rc6
Event History
Jun 19, 2020
CVE Published
via MITRE·04:46 PM
Data Sourced
via MITRE·04:46 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-20888?
CVE-2019-20888 is classified as a denial of service vulnerability that can lead to memory consumption issues in Mattermost Server.
2
How do I fix CVE-2019-20888?
To fix CVE-2019-20888, upgrade Mattermost Server to version 5.7 or higher.
3
Which versions of Mattermost Server are affected by CVE-2019-20888?
CVE-2019-20888 affects Mattermost Server versions prior to 5.7, including versions 5.6.3, 5.5.2, and 4.10.5.
4
What are the potential impacts of CVE-2019-20888?
CVE-2019-20888 allows attackers to generate excessive memory usage, ultimately leading to service disruptions.
5
Is CVE-2019-20888 related to webhooks or commands?
Yes, CVE-2019-20888 can be exploited through outgoing webhooks or slash command integrations.