CVE-2023-45847: Playbook Plugin Crash via Run Checklist

Q: What is the severity of CVE-2023-45847?

CVE-2023-45847 is considered a high-severity vulnerability due to its potential to crash the Playbooks plugin in Mattermost.

Q: How do I fix CVE-2023-45847?

To fix CVE-2023-45847, update Mattermost Server to version 7.8.15 or later, or to a version above 8.1.5, 9.0.3, 9.1.2, or 9.2.1.

Q: What is the impact of CVE-2023-45847?

The impact of CVE-2023-45847 allows an attacker to send a specially crafted request that can crash the Playbooks plugin.

Q: Which versions of Mattermost are affected by CVE-2023-45847?

Mattermost Server versions from 7.8.14 up to 9.2.0 are affected by CVE-2023-45847.

Q: Is there a workaround for CVE-2023-45847?

As of now, no specific workaround is available for CVE-2023-45847; upgrading to a patched version is recommended.

Published Dec 12, 2023

Updated

Mattermost fails to to check the length when setting the title in a run checklist in Playbooks, allowing an attacker to send a specially crafted request and crash the Playbooks plugin

Affected Software

5 affected components

Mattermost Mattermost Server<=7.8.14

Mattermost Mattermost Server>=8.0.0<=8.1.5

Mattermost Mattermost Server>=9.0.0<=9.0.3

Mattermost Mattermost Server>=9.1.1<=9.1.2

Mattermost Mattermost Server>=9.2.0<=9.2.1

Remediation

Information

Update Mattermost Server to versions 8.1.6, 9.0.4, 9.1.3, 9.2.2 or higher.

Event History

Dec 12, 2023

CVE Published

08:17 AM

Data Sourced

08:17 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2023-45847?

CVE-2023-45847 is considered a high-severity vulnerability due to its potential to crash the Playbooks plugin in Mattermost.

How do I fix CVE-2023-45847?